A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found

Zenity Labs researchers found that a single publicly accessible AI agent on Amazon's Bedrock AgentCore could be used to take over every AgentCore agent in the same AWS account and region. The attack exploited an internal AWS interface for temporary cloud credentials, but AWS has since patched the issue and tightened default agent permissions.