One Agent Escalated Another. Every Call Was Authorized.
At DEF CON 34, researchers escalated one AI agent's cloud privileges through a second agent running in a different framework — using nothing but authorized IAM calls. Per-agent least privilege bounds what an agent can do, not what it can arrange.
August 9, 2026 · 11 min read