Oct 14, 2026 · 1 hr 11 min · 11 segments
One prompt injection reached every AgentCore agent in a region, Strands Box keeps secrets out of the agent, Meta rushed Muse VM escape fixes, and Anthropic replaced git.
So where do we wanna start? I think the big one, a little unusual for our AWS news section, is the-
Mm-hmm
Is this Zenity, I think? Uh-
Mm
... sort of a security lab one.
Um, the first thing that I, I made a note on this one was that it's, it's actually f- they have four, four articles, and then, like, there's the summary article that, that I kinda wrote down-
Okay
...
in my list.
So it is, um, it is, it is pretty interesting.
It's, it's essentially, um, them using a prompt to break out of a, uh, what is it called? Firecracker microVM.
Oh, wow.
Yeah.
Yeah.
And essentially, because of at the time, when they first let AWS know about this, at the time, th- what they're calling the default permissions model associated with Agent Core.
And I looked into it a little bit, and I, I couldn't really find what they meant by the default permissions policy.
I-
Permissions model?
Yeah.
Mm.
I looked and, you know, like, y- you know this.
Sometimes, like, if you're in the console, and you next, next, next, next, next, finish, you get the default thing.
Um-
Yeah
So where do we wanna start? I think the big one, a little unusual for our AWS news section, is the-
Mm-hmm
Is this Zenity, I think? Uh-
Mm
... sort of a security lab one.
Um, the first thing that I, I made a note on this one was that it's, it's actually f- they have four, four articles, and then, like, there's the summary article that, that I kinda wrote down-
Okay
...
in my list.
So it is, um, it is, it is pretty interesting.
It's, it's essentially, um, them using a prompt to break out of a, uh, what is it called? Firecracker microVM.
Oh, wow.
Yeah.
Yeah.
And essentially, because of at the time, when they first let AWS know about this, at the time, th- what they're calling the default permissions model associated with Agent Core.
And I looked into it a little bit, and I, I couldn't really find what they meant by the default permissions policy.
I-
Permissions model?
Yeah.
Mm.
I looked and, you know, like, y- you know this.
Sometimes, like, if you're in the console, and you next, next, next, next, next, finish, you get the default thing.
Um-
Yeah
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.