An AWS agent exploited 33 of 37 new vulnerabilities in a test
AWS uses only new vulnerabilities, and the agent cannot get an exploit from the internet during the test.
AWS did a test of its autonomous penetration-testing agent, AWS Security Agent, on 37 new vulnerabilities. Each test is a live container with a flag in it. The agent starts with only an endpoint URL and a short hint. It gets the flag 33 times (89.2 percent) through the vulnerability that the test has in it. In 2 tests, the agent stops the system before it reads the flag.
Sources
Posted
