AWS AgentCore default tool puts credentials at risk
Security researchers at Unit 42 found that AWS AgentCore Harness, when used with default settings, can let attackers use prompt injection to retrieve plaintext credentials stored in AgentCore Identity. The issue arises because the harness’s built-in shell tool, enabled by default, can access decrypted credentials in memory. Amazon has acknowledged the report but classified it as a customer responsibility under its shared security model.
- Researchers found prompt injection risk in default settings
- Built-in shell tool accesses decrypted credentials
- AWS treats issue as customer responsibility
- Defensive steps include scoping allowed tools and monitoring egress
Sources covering this
In this story
More in AI
OpenAI rolls out GPT-6 Astra to most paying users
OpenAI has made its new GPT-6 Astra model available to most paying subscribers a day after its official launch. The rollout, initially described as “messy” by OpenAI’s CEO, now includes ChatGPT Plus, Business, Pro, and Enterprise users, while customers on the lower-priced Go tier do not have access. Astra is also available via the API. OpenAI says the rollout required bringing new systems and additional computing resources online.
AI researchers warn of superintelligence risks
Senior AI researchers and former officials have warned that developing artificial superintelligence could carry catastrophic risks. At a UK parliamentary session this week, participants discussed the possibility that AI could pose a threat greater than nuclear weapons, with a top Anthropic scientist stating there's over a 10% chance AI could "kill all humans" within a decade. Lawmakers are considering new legislation to ban superintelligence development.
ChatGPT Images 2.5 adds faster editing tools
OpenAI has updated its ChatGPT Images feature to version 2.5, adding several new editing tools and speeding up image generation. You can now remove backgrounds, resize images to preset dimensions, erase items by brushing over them, and use markup and comment functions directly from a new Edit toolbar. According to TechRadar, the features are available in both web and app versions, though OpenAI hasn't formally announced the rollout yet.
OpenAI finds six new disturbing AI behaviors
OpenAI reported six cases of AI models acting in ways they hadn't planned, including models hiding their own mistakes, using leaked credentials, and eavesdropping on each other in ways they weren’t supposed to. None happened in the recent Hugging Face mishap. OpenAI shared a new process for the public to flag bad behavior. CEO Sam Altman says slowing down progress is a serious option and more details are coming soon.