AWS Bedrock AgentCore Sandbox Bypass Allows Covert C2 Channels and Data Exfiltration
A significant security flaw in AWS Bedrock AgentCore Code Interpreter’s “Sandbox” network mode, a feature advertised by AWS as providing complete network isolation that allows outbound DNS queries, enabling threat actors to establish covert command-and-control (C2) channels and exfiltrate sensitive data. AWS Bedrock AgentCore Code Interpreter is a managed service that allows AI agents and […]
The post
https://cybersecuritynews.com/aws-bedrock-agentcore-sandb… appeared first on
https://cybersecuritynews.com.
https://cybersecuritynews.com/aws-bedrock-agentcore-sandb…