Posts of last few hours

A newly disclosed attack chain in Amazon Bedrock AgentCore that could turn a single malicious prompt into credential theft and compromise of other AI agents within the same AWS account and region. Dubbed AgentCorruption, the research linked metadata access to an overprivileged execution role, enabling lateral movement, conversation exposure, memory poisoning, and theft of credentials […]

The post AWS Bedrock AgentCore Flaw Allowed Attackers to Hijack AI Agents Using a Single Prompt appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A single prompt sent to a public-facing AI agent could have exposed every Amazon Bedrock AgentCore agent in the same AWS account and region, according to new research from Zenity Labs. The attack chain, named AgentCorruption, gave the researchers access to private chats, source code, long-term memories, API keys, OAuth tokens, and secrets held in […]

The post One Prompt Could Hijack AWS AI Agents and Steal Cloud Credentials appeared first on Cyber Security News.

Microsoft is extending Teams security to detect malicious links hidden inside QR codes and warn users after a message has been delivered. The update adds QR code checks to existing Microsoft Defender for Office 365 protections, giving users clearer warnings and security teams more data to investigate suspicious messages. According to Message Center notice MC1490905, […]

The post Microsoft Teams to Warn Users About Malicious Links Hidden in QR Codes appeared first on Cyber Security News.

AT&T will pay $177 million to settle lawsuits over two major customer data breaches disclosed in 2024, after a federal judge granted final approval on October 2, 2026. The agreement covers separate incidents that exposed personal details and call records, creating lasting privacy risks for millions of current and former customers. Judge Sidney A. Fitzwater […]

The post AT&T to Pay $177 Million After Two Massive Customer Data Breaches appeared first on Cyber Security News.