Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

AWS Bedrock AgentCore flaw let attackers steal credentials via SSRF

Zenity Labs researchers found that AWS Bedrock AgentCore agents could be tricked via a single prompt into fetching IMDS credentials through an SSRF-style request, letting an external attacker hijack all AgentCore agents, read sessions/memories, and access secrets in the same AWS account and region due to an overpermissioned default IAM role and lack of network isolation in the Firecracker MicroVM.

Disclosed 1 December 2025 · Record updated 9 October 2026

Impact

Attackers could extract temporary AWS credentials via a crafted prompt, enumerate and take over other AgentCore agents in the same account/region, pull container images, read user conversations and agent memories, and access AWS Secrets Manager; the overpermissioned role and IMDSv1 exposure persisted until mid-2026 before being fully remediated.

Our coverage

Sources

  1. theregister.comhttps://theregister.com/security/2026/10/09/aws-agentcore-security-undone-by-prompt-requesting-credentials/5302436