Asos confirms customer data breach after hackers send rogue app notification
British fashion retailer Asos confirmed that customer data was compromised in a cyberattack. The hackers alerted customers via a push notification claiming they had "fully compromised" the company's cloud storage.
A single prompt was enough to hijack every AI agent in an AWS account
Zenity Labs researchers found that a single publicly accessible AI agent on Amazon's Bedrock AgentCore was enough to take over every AgentCore agent in the same AWS account and region. The attack exploited an internal AWS interface for temporary cloud credentials that agents could reach without restriction. AWS has since patched the issue and significantly tightened the agents' default permissions