Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier Bob, possibly the same Bob whose conversations with Alice draw so much interest from eavesdropping Eve, was browsing a site well call TechHub. The site hosts an AI agent served by Amazon Bedrock AgentCore. Bob asked the agent for help understanding the content of a URL, a credential endpoint – in raw JSON, if you dont mind. The endpoint returned data from the Instance Metadata Service IMDS ,...
