Get the latest tech news

AWS AgentCore security undone by prompt requesting credentials


Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier

None

Get the Android app

Or read this on The Register

Read more on:

Photo of AWS

AWS

Photo of AgentCore security

AgentCore security

Related news:

News photo

AWS launches open-source AI agent sandbox to prevent YOLO mode disasters

News photo

All the numbers: Amazon Prime Day 2026 powered by AWS

News photo

Amazon commits $1 billion to communities near data centers, AWS CEO says it no longer uses NDAs with government agencies