Search: “AWS root user”

4 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 56 Malware 27 Exploit / PoC 22 Ransomware 20 Industry 18 Data breach 17 Policy & legal 10 Threat actor 9 AI industry 8 AI tools & infra 6 AI research 5 Tools 5 AI safety & security 4 Phishing & fraud 4

SeverityAll critical 90 high 48 medium 41 low 12 info 28

Hackers Can Turn Vulnerable LiteLLM AI Gateways Into Root Access and Cloud Credential Theft

Wiz found multiple LiteLLM AI gateway flaws, including a CVE-2026-59822 MCP auth bypass added to CISA KEV, enabling root code execution and cloud credential theft.

An internet scan of 3,074 exposed LiteLLM instances found 294 (9.6%) accepting the default sk-1234 master key and 191 (6.2%) requiring no authentication. CVE-2026-59822 lets a single-character Bearer token establish a valid MCP session via an OAuth2 fallback in versions before 1.84.0; the flaw is in CISA's Known Exploited Vulnerabilities catalog. CVE-2026-59821 allows Python code execution as root in the gateway container via unsanitized Custom Code Guardrails registration before 1.82.0-stable, and CVE-2026-35029 permits config changes leading to RCE and admin takeover. Admin access plus pass-through endpoints can reach cloud metadata services to steal IAM credentials.

GBHackersSep 10, 12:56 UTC · 7d agoAI safety & security in the wildCVE-2026-59822 CVE-2026-59821 CVE-2026-35029

When AI Remembers Too Much

Unit 42 PoC shows indirect prompt injection can poison Amazon Bedrock Agent long-term memory, enabling silent exfiltration of conversation history across future sessions.

Palo Alto Networks Unit 42 published a proof of concept showing that indirect prompt injection can silently poison the long-term memory of Amazon Bedrock Agents when the memory feature is enabled. Malicious content on a webpage or document manipulates the agent's session summarization process, so injected instructions persist across sessions and are added to later orchestration prompts, silently exfiltrating user conversation history. The issue is not a vulnerability in the Amazon Bedrock platform but an illustration of the broader unsolved LLM prompt-injection challenge. Amazon reviewed the research and stated that Bedrock Guardrails with the prompt-attack policy provides effective mitigation.

Palo Alto Unit 42Aug 17, 12:32 UTC · Aug 17, 2026AI safety & security

LogDNA Spike Protection gives organizations control over fluctuations in data and spend

Help Net SecurityApr 20, 08:48 UTC · Apr 20, 2026AI safety & security

When Pentest Tools Go Brutal: Red-Teaming Tool Being Abused by Malicious Actors

Palo Alto Unit 42Jun 5, 20:22 UTC · Jun 5, 2024AI safety & security