Kinnaird McQuade

Reported Context (2)

The article credits him and his team with demonstrating a DNS-based sandbox escape in AWS Bedrock AgentCore’s Interpreter, including command execution, S3 access, and data exfiltration. Weekly Security Roundup Covers AWS Bedrock Sandbox Escape and Wiz Acquisition
BeyondTrust chief security architect who described how AgentCore sandbox DNS queries could enable command-and-control and data exfiltration. Researchers Detail Data-Exfiltration Risk in Amazon Bedrock and Flaws in LangSmith and SGLang

CVE (4)

People (4)

MITRE ATT&CK (6)

Vendors (4)

Products (5)

Industries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.