SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
> Search
30 results for “aws”
Security
SecurityLightwell Uncovers 400+ Java Library Flaws
IBM and Red Hat's Lightwell project has identified over 400 novel vulnerabilities in Java libraries, launching a clearinghouse service for customers to submit code for review.
SecurityCISA Sets October 11 Patch Deadline
Five Flax Typhoon–exploited flaws join CISA's KEV catalog as federal agencies face an October 11, 2026, patch-or-discontinue deadline.
CloudAWS Agent Flaws Expose Control Gap
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
AI & MLAWS Sandbox Targets Rogue AI Agents
AWS's new Strands Box uses OS isolation and custom policies to curb AI agent behavior, but security experts warn controls have gaps.
AI & MLAWS sandbox aims to tame rogue AI agents
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
Cyber CrimeStates sue TP-Link over China ties, security claims
Florida, Iowa, Montana, and Nebraska allege TP-Link misled buyers about router security and undisclosed reliance on Chinese suppliers.
SecurityRed Hat Batch-Fixes 400 Open-Source Flaws
Red Hat's Lightwell Clearinghouse exits pilot after remediating over 400 novel vulnerabilities in foundational Java libraries since June.
SecurityDell's 18 Flaws Open Storage to Attackers
Dell has patched 18 CVEs in its storage and update tools, including two maximum-severity flaws with no workarounds.
Cyber CrimeClingSTUN Backdoor Turns Linux Hosts Into Proxies
FortiGuard Labs details a Linux backdoor that abuses public STUN servers, exploits two dozen flaws, and self-propagates across routers.
Tech NewsAmazon Drops Data Center NDAs
AWS CEO Matt Garman says the company no longer uses NDAs with government agencies, as more than 100 data center moratoriums are weighed across the U.S.
Cyber CrimeWarlock Hits SharePoint, Then Strikes
Symantec says the China-linked group behind Warlock ransomware disabled defenses on dozens of hosts within hours of exploiting SharePoint flaws.
SecurityAI-Discovered Flaws Skew Toward RCE
Google's threat intelligence unit reports AI-found vulnerabilities are far more likely to enable remote code execution than other disclosed flaws.
SecurityGoogle: AI Is Rewriting Bug Economics
GTIG data shows vulnerability disclosures doubled in 2026 while exploitation shifted toward n-days, with AI-discovered flaws carrying a riskier profile.
SecurityWatchGuard Patches 15 Fireware OS Flaws
WatchGuard fixed a critical Fireware OS code injection flaw and 13 high-severity bugs, plus three Access Point vulnerabilities disclosed a day earlier.
SecurityChrome 154 Fixes 108 Flaws, 11 Critical
Google's latest stable release patches a wide swath of memory-safety bugs, but most bug bounty payouts remain undecided.
SecurityCheck Point Zero-Day Hit Management Servers
Attackers exploited a management server flaw in July while a separate VPN bug now draws ongoing attempts against small-business firewalls.
Cyber CrimeShinyHunters Hack FBI Jobs Site, Stolen Data Claimed
ShinyHunters claims it breached an Oracle PeopleSoft zero-day on the FBI jobs site, stealing 2-3 TB of employee data and demanding a retraction, not ransom.
SecurityFour Kernel Flaws, Public Exploits, One Fix
A researcher published working local-root exploits for four Linux kernel bugs fixed weeks earlier, flagging a patching race for older systems.
SecurityOne Week, Nine Flaws, No Easy Fix
SecurityWeek's roundup covers a ransomware sentencing, a zero-click AI plugin flaw, and a critical SAP bug under active scrutiny.
SecurityDocker Fixes macOS Sandbox Escape Flaws
Two Docker Sandboxes vulnerabilities let malicious guest code read or modify macOS host files, with fixes shipped in version 0.42.0.
SecurityOracle's Monthly Patch Push Targets Fusion Middleware
Oracle's September update delivers 673 patches across 17 product families, with Fusion Middleware carrying five maximum-severity flaws.
SecurityPixel Zero-Day Patched After Targeted Attacks
Google's September 2026 Pixel update fixes 110 flaws, including a modem zero-day exploited in limited, targeted attacks.
SecurityMythos May Ease 2027 Patching Load
Gartner's Craig Lawson suggests AI bug-hunting could cut vulnerability severity next year as technical debt gets paid down.
AI & MLAI Prompts as Evidence in Court Cases
A 3M expert witness using ChatGPT shows how AI conversation logs can become discoverable evidence in lawsuits.
SecurityDutch NCSC warns Check Point VPN flaws
Dutch NCSC warns two critical Check Point VPN flaws could be exploited soon, after fixes shipped on September 9.
SecurityObscurity Fades as AI Exposes Old Flaws
AI agents are unearthing decades-old bugs and widening the patch gap, leaving secret-dependent defenses exposed.
AI & MLAmodei's slow-AI plan draws buy-in
Anthropic's CEO proposes third-party evaluators and coordinated limits on AI progress, and OpenAI's Sam Altman says he agrees.
Cyber CrimeArtifactory Flaws Chained Into Admin Backdoors
Wiz reports attackers chained two Artifactory token flaws to seize admin control and plant backdoors, while a third flaw was exploited separately.
SecurityCheck Point's Patch Gap Leaves VPN Flaws Exposed
Two 9.8-rated certificate flaws in Check Point gateways carry fixes that some customers say they cannot access.