FlagThis — Daily Cybersecurity Intelligence Briefing

The emergence of Universal Physically Transferable Adversarial Patches (GaP) enables the bypass of black-box facial recognition systems, specifically targeting the computer vision (CV) pipelines used by Clearview AI and Amazon Rekognition. By exploiting vulnerabilities in Convolutional Neural Networks (CNNs) and Transformer-based image classification, GaP patches manipulate physical-to-digital transferability mapping to disrupt feature extraction. This results in significantly higher False Rejection Rates (FRR) and allows users to evade identity matching. The technical vector involves introducing adversarial noise into the physical environment that translates to high-confidence misclassifications within the target model's latent space.

The shift toward autonomous Web4 agents utilizing the Model Context Protocol (MCP) has created a critical security gap in identity and authorization. While Amazon Bedrock AgentCore implements granular IAM controls using aws:ViaAWSMCPService and aws:CalledViaAWSMCP to isolate agent-driven traffic, the agent skill marketplace presents a massive supply chain risk. Maliciously crafted agent "skills" have demonstrated the ability to bypass conventional security scanners, impacting approximately 26,000 agents, including corporate accounts. Mitigating these risks requires the adoption of emerging Web4 identity and payment standards (x402, EIP-8004) alongside advanced deceptive architectures like the AdvancedShelLM multi-agent honeypot to identify and influence autonomous adversarial behavior.

Threat actor group ShinyHunters claims the exfiltration of 8.8 terabytes of sensitive data from One Medical, a healthcare provider owned by Amazon. The breach targets the intersection of cloud-scale infrastructure and Protected Health Information (PHI), posing severe risks of medical identity theft and regulatory non-compliance. While the specific initial access vector remains under investigation, the scale of the exfiltration suggests a significant compromise of backend storage, database systems, or cloud snapshots. The incident is currently in an active extortion phase, with the threat actor demanding payment to prevent the public release of sensitive patient records.

Wiz Research has identified a high-severity vulnerability (CVE-2026-12957, CVSS 8.5) in Amazon Q Developer that allows for remote code execution (RCE) via "Agentjacking." By leveraging the Model Context Protocol (MCP), attackers utilize a "Fake Bug Report" social engineering vector to lure developers into opening booby-trapped repositories. These repositories contain a malicious .amazonq/mcp.json configuration file, which the AI agent automatically parses and executes with the developer's full environment privileges. This creates a direct pipeline from a local IDE session to enterprise cloud infrastructure compromise, enabling the exfiltration of live AWS credentials, API keys, and SSH agent access, effectively bypassing traditional perimeter-based security controls.