AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

The Hacker News 6 August 2026, 11:57 EEST Cloud Security

Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent's tools with no check that a model turn had authorized them. In several of the attack paths, the model never ran at all, so system prompts, content filters, and model-level guardrails never got a chance to intervene. The affected products include Amazon…

Read the full story on The Hacker News https://thehackernews.com/2026/08/aws-google-and-vercel-patch-agent-flaws.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit The Hacker News
ToxicPanda Android malware uses VPN permissions to block Google Play BleepingComputer
Hackers infect Android car head units with proxy botnet malware BleepingComputer
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 The Hacker News