RC RANDOM CHAOS

cloud security

2 posts

One POST read cross-tenant secrets
Article

One POST read cross-tenant secrets

Five critical cross-tenant bugs in Azure API Connections let one tenant's requests reuse another tenant's stored backend credentials via Logic Apps.

AgentCore and the Metadata Problem
Article

AgentCore and the Metadata Problem

Zenity's AgentCorruption research shows how one prompt to an AWS Bedrock AgentCore agent could expose credentials and widen blast radius.