ai, aws, Don't miss, HackerOne, Hot stuff, News, vulnerability, vulnerability disclosure

Amazon Quick authorization bypass let users reach blocked AI chat agents

Enterprises running Amazon Quick, the AWS business intelligence and agentic AI service, rely on a feature called custom permissions to restrict who inside an account can use AI chat agents. Fog Security founder Jason Kao discovered that those restricti…