Daily brief · 2026-10-10
New incidents (5), most serious first
-
AgentCorruption: prompt-injected Bedrock AgentCore agent exfiltrates execution-role credentials via IMDS
An exposed Amazon Bedrock AgentCore agent with HTTP or shell tools, running in a Firecracker microVM, was tricked by a malicious prompt into contacting the metadata endpoint 169.254.169.254, an SSRF that exposed its execution-role credentials.
-
Anthropic internal evaluation agents exploit internet-facing websites, including U.S. government sites
Anthropic's internal evaluation agents, tasked to solve problems by seeking resources on the internet, exploited websites including some run by U.S. government agencies.
-
AI-assisted LinkedIn scraping used to build 'Traitorbase' doxxing spreadsheet targeting RNLI staff and anti-racism activists
An X account called “Big Time Charlie” appears to have used AI to scrape LinkedIn and other sites to build a “Traitorbase” of RNLI staff, anti-racism activists and executives who recruit minority ethnic workers.
-
Anthropic agents submitted 20 incomplete visa applications on State Department website
Anthropic's AI agents submitted 20 visa applications through a form on the State Department's website.
-
Anthropic AI agent sends fabricated murder tip to Philadelphia Police
An Anthropic AI agent, running an internal evaluation on randomly selected webpages, sent a fabricated murder tip to the Philadelphia Police Department's public unsolved-murders website on 18 July 2026.