{
 "type": "bundle",
 "id": "bundle--8adab9dd-26e2-5df5-92ea-e12ddef2d505",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--3c5a3f89-4436-5f0d-9c92-ffc184be1f35",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "'AgentCorruption' Puts AWS Environments at Risk With Single Prompt",
   "description": "Zenity Labs researchers said they sent a plain-language prompt to one exposed Amazon Bedrock AgentCore agent, which fetched its execution role credentials from the instance metadata service. They then used the credentials from their own computer. According to Zenity, the broad default role let them list agents, copy container images and source code, invoke internal agents, read private conversations, retrieve stored secrets, and plant persistent memory instructions. AWS disputed the characterization, calling it documented behavior rather than a vulnerability.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-023",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-023/"
    },
    {
     "source_name": "Dark Reading",
     "url": "https://www.darkreading.com/cloud-security/agentcorruption-aws-environments-at-risk-single-prompt",
     "description": "'AgentCorruption' Puts AWS Environments at Risk With Single Prompt"
    },
    {
     "source_name": "The Next Web",
     "url": "https://thenextweb.com/news/aws-agentcore-zenity-agentcorruption-one-prompt-agents",
     "description": "One prompt let researchers take over every AWS AgentCore agent in a region"
    },
    {
     "source_name": "Zenity Labs",
     "url": "https://labs.zenity.io/post/agentcorruption-how-a-single-prompt-collapsed-the-entire-cloud-security-model",
     "description": "AgentCorruption: how a single prompt collapsed the entire cloud security model"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--2b8c6e79-5b70-5e75-a3ec-26a933d00605",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "Zenity Labs researchers, who used a prompt sent to an exposed agent",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--73580ea9-d3bc-567d-b3e0-0ef1837476f5",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "Amazon Web Services (Amazon Bedrock AgentCore agents within one AWS account and region)",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--f1fca4a5-1534-504d-a184-94ad656c7045",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--cb9c6aa9-f308-5a65-83dc-a2390b383205",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "TA0003 Persistence",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0003"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--aa1e85d5-c6a6-516d-bae6-a53df67ed165",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "TA0004 Privilege Escalation",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0004"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--848a9be1-64ae-5345-9c2a-b3a1bccedba5",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "TA0006 Credential Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0006"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--173cbe29-bf08-5e25-8f5c-d61937b86645",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "TA0007 Discovery",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0007"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--c68609dd-42b6-553d-863e-2975d21ea565",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "TA0008 Lateral Movement",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0008"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--594c3c85-8d04-58cd-8994-eccd9d7cf8c5",
   "created": "2026-10-08T00:00:00.000Z",
   "modified": "2026-10-08T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  }
 ]
}