Fetching from the wire…
01
02
03
04
05
06
07
08
Skills2026-03-19 · source-backed
After the Bedrock AgentCore disclosure: isolate agent execution from IMDS (169.254.169.254), restrict DNS to controlled resolvers, monitor for anomalous subdomain lengths and base64 encoding patterns. Any agent runtime permitting unrestricted DNS has an open exfiltration channel. Apply this to all sandbox environments, not just AWS. BeyondTrust
Each link below shares sources, entities, or timing with this story.
AWS Bedrock AgentCore built by AWS / Shared entities / Same source / Shared topic
Linked by a graph relationship (AWS Bedrock AgentCore built by AWS); both cover AWS, Bedrock AgentCore, DNS, IMDS; cite the same source (BeyondTrust).
AWS released Amazon Bedrock AgentCore / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (AWS released Amazon Bedrock AgentCore); both cover Bedrock AgentCore, BeyondTrust, DNS; overlapping topics (agentcore, bedrock, execution, exfiltration, sandbox).
AWS released AgentCore / Shared entities / Shared topic / What happened next
Linked by a graph relationship (AWS released AgentCore); both cover AWS, Bedrock AgentCore; overlapping topics (agent, agentcore, bedrock).
SAP partners with AWS / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (SAP partners with AWS); both cover AWS, Block; overlapping topics (agent, block).
Bedrock built by AWS / Shared entity: AWS / Shared topic / What happened next
Linked by a graph relationship (Bedrock built by AWS); both cover AWS; overlapping topics (agent, agentcore, bedrock).
Cursor partners with AWS / Shared entity: Block / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cursor partners with AWS); both cover Block; overlapping topics (agent, block).
AWS partners with Anthropic / Shared entities / What happened next
Linked by a graph relationship (AWS partners with Anthropic); both cover AWS, DNS; picks up the AWS thread on 2026-08-07.
ServiceNow uses AWS / Shared entity: Block / Shared topic / What happened next / Tension
Linked by a graph relationship (ServiceNow uses AWS); both cover Block; overlapping topics (agent, block).