NotC2 turns Amazon Bedrock into cloud command-and-control
NotC2 PoC uses AWS services and Amazon Bedrock for post-compromise C2 operations without bypassing IAM.
Stories per day · 30 days
6 RSS
7 stories, newest first · one card per story
Stories tagged #bedrock
Nine AI developer platforms disclose October credential incidents
Wiz ties later Bedrock abuse of enterprise keys to vendor breaches, including about 800,000 and 1.7 million calls.
5
AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt
Zenity showed one prompt could steal Bedrock AgentCore credentials and reach other agents in the account.
AWS AgentCore security undone by prompt requesting credentials
Zenity Labs showed one prompt could steal AWS AgentCore IMDS credentials and hijack regional agents.
A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found
Zenity says one prompt against a public Bedrock AgentCore agent could hijack every agent in that AWS region.
OpenAI gives Codex reusable cloud environments that work across devices
OpenAI made Codex cloud environments reusable across devices and added CLI, review, and security tools.
Claude Code reads AGENTS.md only when telemetry is on
Claude Code loads AGENTS.md only when a telemetry feature flag resolves, so privacy settings silently skip it.
1