Related News
Nov 11, 2026
AgentCore memory poisoning: what AWS builds in, what its new write-validation pattern adds, and where the demo evidence stops
An AWS Security Blog post from 9 November 2026 separates the memory-poisoning controls AgentCore already offers (IAM namespace conditions, namespace-variable validation, Cedar policy, custom consolidation prompts, the ApplyGuardrail API) from a custom pre-write Lambda interceptor that scores each write and returns ALLOW, QUARANTINE or DENY. The custom layer is a sample you deploy, not a default setting. Its published 11-scenario demo used a keyword-overlap stand-in for embeddings, so the results do not show production accuracy or false-positive rates. Writes that bypass AgentCore Gateway, such as direct SDK calls, are not covered by the interceptor.
Nov 4, 2026
Egeria AI Shield uses separate approvals for WAF blocks and code repair
PKUTECH describes temporary containment, reviewed repairs and retesting; Sentinel recommendations remain under development.
Nov 4, 2026
NCSC’s 2028 AI ransomware warning concerns existing weaknesses
NCSC’s forecast for UK critical infrastructure separates future AI-enabled threats from observed incidents and mandatory rules.