AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt
Zenity showed one prompt could steal Bedrock AgentCore credentials and reach other agents in the account.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #zenity
A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found
Zenity says one prompt against a public Bedrock AgentCore agent could hijack every agent in that AWS region.
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Zenity disclosed patched zero-click prompt-injection flaws in Salesforce Agentforce that could exfiltrate CRM data.
2
Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration
Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.
3
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.
1