> Global S3: Another C2 Channel for AgentCore Code Interpreters

Introduction Building on recent research identifying DNS-based exfiltration risks in Sandbox mode AgentCore Code Interpreters, I identified global S3 access as another Command & Control channel for sandboxed code interpreters. Unlike DNS-based exfiltration, which has since been fully mitigated, S3 access is a useful and fully-documented feature of AgentCore code interpreters that nevertheless creates a […] The post Global S3: Another C2 Channel for AgentCore Code Interpreters appeared first on Security Boulevard.