LIVE FEED
AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec

AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 AWS Machine Learning Blog

AWS has released AgentCore Gateway with native support for the Model Context Protocol (MCP) 2026-07-28 specification, enabling standardised tool-use and context-sharing across agentic AI workloads on AWS infrastructure. For defenders, MCP-compliant gateways dramatically expand the inter-agent communication surface, introducing new vectors for prompt injection through tool responses, malicious server impersonation, and privilege escalation across agent boundaries. Security teams operating agentic pipelines on AWS must now treat MCP endpoints as high-value targets requiring the same scrutiny applied to API gateways and identity providers.

Amazon Bedrock Prompt Injection Traverses Agent Hierarchies

Amazon Bedrock Prompt Injection Traverses Agent Hierarchies

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 Palo Alto Unit 42

Unit 42 researchers conducted red-team analysis of Amazon Bedrock's multi-agent collaboration framework, demonstrating how attackers can systematically exploit prompt injection to traverse agent hierarchies, extract system instructions, and invoke tools with attacker-controlled inputs. The research reveals that multi-agent architectures introduce compounded attack surfaces through inter-agent communication channels, though no underlying Bedrock vulnerabilities were identified. Properly configured Guardrails and pre-processing stages effectively mitigate the demonstrated attack chains.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.