[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fARzYBZpiAUbeCvvCvR8rKRn6ZwHXrN65hW7L_xZOQ0E":3},{"article":4,"iocs":36,"watch_terms":41,"solutions":42,"lesson":10},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":13,"relevance_score":14,"entities":15,"category_id":16,"category":17,"article_tags":20},"751d327c-6bbb-4a62-8cbe-85a1f8c50995","Researchers Find Data Leak Risk in AWS Bedrock AI Code Interpreter","researchers-find-data-leak-risk-in-aws-bedrock-ai-code-interpreter","AWS Bedrock AI tool flaw allows data leaks via DNS queries in AgentCore Code Interpreter sandbox, exposing sensitive cloud data, researchers warn.","Researchers at Phantom Labs discovered a sandbox escape vulnerability in AWS Bedrock's AgentCore Code Interpreter that allows attackers to exfiltrate sensitive data via DNS queries, bypassing network isolation controls. AWS initially attempted a patch in November 2025 but rolled it back after two weeks due to technical issues, ultimately deciding to update documentation instead of issuing a permanent fix. The vulnerability poses significant risk to organizations storing sensitive data in S3 and Secrets Manager, as attackers can use prompt injection or supply chain attacks to trigger DNS-based data exfiltration.",null,"https:\u002F\u002Fhackread.com\u002Fdata-leak-risk-in-aws-bedrock-ai-code-interpreter\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F03\u002Fdata-leak-risk-in-aws-bedrock-ai-code-interpreter.jpg","2026-03-17T05:21:43.565223+00:00",8,[],"80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":16,"icon":10,"name":18,"slug":19},"Vulnerabilities","vulnerabilities",[21,26,31],{"category":22},{"id":23,"icon":10,"name":24,"slug":25},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":27},{"id":28,"icon":10,"name":29,"slug":30},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":32},{"id":33,"icon":10,"name":34,"slug":35},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",[37],{"type":38,"value":39,"context":40},"malware","DNS Command-and-Control channel","PoC technique using chunked ASCII in DNS A records for command injection and data exfiltration via long subdomains",[],{"controls":43,"vendors":127},[44,73,102],{"slug":45,"name":46,"problem":47,"products":48},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[49,57,65],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"slug":74,"name":75,"problem":76,"products":77},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[78,86,94],{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"slug":30,"name":103,"problem":104,"products":105},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":123,"product_name":124,"url":125,"description":126},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[128],{"slug":129,"name":130,"logo_path":131,"roles":132},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png",[133],"reported_by"]