Source: Theregister
Amazon's AgentCore system was vulnerable to a basic social engineering attack—a malicious prompt could convince the AI agent to hand over AWS credentials stored in its memory, turning a foundation model into an unwitting credential harvester. AWS shipped agentic tools without basic guardrails against prompt injection. As enterprises deploy autonomous agents with real infrastructure access, the gap between stated security postures and actual threat modeling will widen.