TLDR Tech / InfoSec
We Found Eight Attack Vectors Inside AWS Bedrock. Here's What Attackers Can Do with Them
XM Cyber's research team mapped eight validated attack vectors in AWS Bedrock targeting permissions and integrations, not the models themselves. A single over-privileged identity can redirect invocation logs to an attacker-controlled S3 bucket, steal SaaS credentials stored in Knowledge Base configs, hijack agents via bedrock:UpdateAgent, inject malicious Lambda layers, reroute flow data, strip guardrails entirely, or poison shared prompt templates in-flight — all without triggering an application redeployment.
Read the full story