cyber.hendryadrian.com
Security News · aws.amazon.com

AWS August 2026 Security Digest Covers 23 Bulletins and Agentic AI Security

· Original article ↗

Summary

AWS’s August 2026 security digest covers 20 blog posts, 17 code samples and 23 security bulletins. It highlights vulnerabilities across AI-agent tools, OpenSearch and AWS products, says patches are available, and summarizes new security capabilities and guidance.

Key points

  • AWS published 23 security bulletins covering open-source SDKs, MCP servers, developer tools and OpenSearch; the article says patches are available and urges upgrades.
  • Reported issues in AI-agent tools include prompt-injection consent bypasses enabling command and code execution, cross-tenant agent-memory exposure, and credential disclosure and authorization flaws.
  • Remote code execution vulnerabilities affected OpenSearch, amazon-ssm-agent, awsdac, and the Kiro IDE and CLI on Windows.
  • AWS Management Console Private Access now supports isolated VPCs without internet connectivity, routing console traffic through AWS PrivateLink endpoints.
  • AWS described an automated approach to finding and remediating over-permissioned S3 access using AWS Lambda, AWS Config and AWS Security Hub.
  • The digest includes guidance for correlating CloudTrail, VPC Flow Logs and Route 53 Resolver logs to detect multi-stage attacks.

Article Details

Event Type
Monthly AWS security digest covering security features, compliance updates, resources, and vulnerability bulletins.
Impact
The digest reports 23 August 2026 security bulletins affecting open-source SDKs, MCP servers, developer tools, and the OpenSearch ecosystem. Reported issues include command and code execution, remote code execution, authorization and credential-disclosure flaws, and denial of service. AWS states that patches are available and advises upgrading promptly.

Vendors

Amazon Web ServicesRead all about the latest AWS security features, compliance updates, and hands-on resources in our monthly digest posts.AnthropicAWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflowsOpenAIAWS partners with Anthropic and OpenAI to bring AWS Continuum into developer workflows

Products

Amazon Bedrock AgentCoreAI security continued to grow with four posts on custom authentication in Amazon Bedrock AgentCore Gateway, user authorization propagation in AI agents, and extending Bedrock Guardrails to tool interactions.Amazon CognitoIdentity and access management led the month with five posts covering self-service rate limits for Amazon Cognito, a decade of AWS Managed Microsoft AD, a redesigned sign-in experience, console Private Access forAmazon S3followed with four posts on AWS KMS data key caching, ACME protocol support in AWS Certificate Manager, Amazon S3 over-permissioned access remediation, and the upcoming deprecation of email-based domain validation.AWS Certificate ManagerData protection followed with four posts on AWS KMS data key caching, ACME protocol support in AWS Certificate Manager, Amazon S3 over-permissioned access remediation, and the upcoming deprecation of email-based domainAWS CLIOther notable issues include disabled SSH host key verification in the AWS CLI, memory-safety flaws in the AWS SDK for C++, privilege escalation in the FreeRTOS-Kernel, and memory-amplification denial of service inAWS Network FirewallAWS Network Firewall now supports rule hit countAWS SDK for C++notable issues include disabled SSH host key verification in the AWS CLI, memory-safety flaws in the AWS SDK for C++, privilege escalation in the FreeRTOS-Kernel, and memory-amplification denial of service in AmazonAWS Security Hub ExtendedAWS Security Hub Extended now includes supply chain security with Chainguard and Socket as curated partners, helping you verify open source dependencies and block malicious packages through a single AWS billingFreeRTOS-Kernelverification in the AWS CLI, memory-safety flaws in the AWS SDK for C++, privilege escalation in the FreeRTOS-Kernel, and memory-amplification denial of service in Amazon ion-java.OpenSearchIn August 2026, AWS published 23 security bulletins addressing vulnerabilities across open-source SDKs, MCP servers, developer tools, and the OpenSearch ecosystem.

Related Articles