--- title: "Hands-On Labs Launched October 2025 - Cybr" description: "We added three new Hands-On Labs in October 2025 to Cybr’s growing catalog. Let’s take a look!" url: https://cybr.com/announcements/hands-on-labs-launched-october-2025/ --- # Hands-On Labs Launched October 2025 We added three new Hands-On Labs in October 2025 to Cybr’s growing catalog. Let’s take a look! Christophe Published October 31, 2025 We added three new Hands-On Labs in October 2025 to Cybr’s growing catalog. Let’s take a look! ## [Bedrock AgentCore Privilege Escalation via Code Interpreters](https://cybr.com/hands-on-labs/lab/bedrock-agentcore-privilege-escalation-via-code-interpreters/) [![Amazon Bedrock AgentCore Code Interpreter PrivEsc](https://media.cybr.com/2025/10/Bedrock-AgentCore-Privilege-Escalation-via-Code-Interpreters-300x300.jpg)](https://cybr.com/hands-on-labs/lab/bedrock-agentcore-privilege-escalation-via-code-interpreters/) [View lab >](https://cybr.com/hands-on-labs/lab/bedrock-agentcore-privilege-escalation-via-code-interpreters/) This is our first AI security lab! More to come. Learn how a limited user can escalate privileges in AWS Bedrock AgentCore by abusing an overprivileged code interpreter role. Exploit a misconfigured custom code interpreter by directly invoking arbitrary Python and shell commands that execute with the interpreter’s IAM role permissions rather than their own limited credentials, enabling unauthorized S3 data exfiltration and control plane access. The lab teaches the security implications of overprivileged AI infrastructure, proper least-privilege controls for execution roles, and how Public vs Sandbox network modes affect the attack surface. ## [Hunting for Ghost Databases in the Cloud](https://cybr.com/hands-on-labs/lab/hunting-for-ghost-databases-in-the-cloud/) ![Finding Ghost Databases in the Cloud Hands-On Lab](https://media.cybr.com/2025/10/finding-ghost-databases-banner-300x300.jpg) [View lab >](https://cybr.com/hands-on-labs/lab/hunting-for-ghost-databases-in-the-cloud/) Learn how to detect “ghost databases” which are abandoned cloud database instances that remain active and incur costs despite having no connections or ownership. While this topic applies to all cloud platforms, the lab demonstrates detection techniques with Amazon RDS. You’ll use both AWS-native tools (CloudWatch metrics, RDS Performance Insights, Cost Explorer) and open-source/multi-cloud solutions (Steampipe for SQL-based queries and Cloud Custodian for policy-based automation). Through these tools, you’ll discover how to identify inactive RDS instances by analyzing connection patterns, missing tags, and usage metrics over extended periods. Please note: databases take a while to deploy, so this lab can take up to 10 minutes to be ready. Familiarize yourself with the lab guide below what you wait! ## [Remediating Ghost Databases in the Cloud](https://cybr.com/hands-on-labs/lab/hunting-for-ghost-databases-in-the-cloud/) ![Remediating Ghost RDS Databases Hands-On Lab](https://media.cybr.com/2025/10/Remediating_Ghost_Databases_Banner-300x300.jpg) [View](https://cybr.com/hands-on-labs/lab/hunting-for-ghost-databases-in-the-cloud/) [](https://cybr.com/hands-on-labs/lab/remediating-ghost-databases-in-the-cloud/)[lab >](https://cybr.com/hands-on-labs/lab/hunting-for-ghost-databases-in-the-cloud/) Learn how to detect “ghost databases” which are abandoned cloud database instances that remain active and incur costs despite having no connections or ownership. While this topic applies to all cloud platforms, the lab demonstrates detection techniques with Amazon RDS. You’ll use both AWS-native tools (CloudWatch metrics, RDS Performance Insights, Cost Explorer) and open-source/multi-cloud solutions (Steampipe for SQL-based queries and Cloud Custodian for policy-based automation). Through these tools, you’ll discover how to identify inactive RDS instances by analyzing connection patterns, missing tags, and usage metrics over extended periods. Please note: databases take a while to deploy, so this lab can take up to 10 minutes to be ready. Familiarize yourself with the lab guide below what you wait! ### [View all of our Hands-On Labs >](https://cybr.com/hands-on-labs) ### [Get started for free >](https://cybr.com/auth/register) ## Filed under - [Announcements](https://cybr.com/announcements/) - [Blue Team](https://cybr.com/blue-team/) - [Cloud Security](https://cybr.com/cloud-security/) - [Red Team](https://cybr.com/red-team/) - [AI Security](https://cybr.com/tag/ai-security/) - [AWS](https://cybr.com/tag/aws/) - [AWS Security](https://cybr.com/tag/aws-security/) - [Cloud Security](https://cybr.com/tag/cloud-security/) ## Comments Loading comments… Recommended resources [![Explore the AWS Certified Security Specialty course](https://media.cybr.com/2023/12/cybr-aws-security-specialty-banner-768x432.jpg)](https://cybr.com/courses/aws-certified-security-specialty-course/) ## Build practical AWS security skills Start with the core services, then prepare for the AWS Certified Security Specialty exam with guided lessons and hands-on practice. [Introduction to AWS Security](https://cybr.com/courses/introduction-to-aws-security/) [Security Specialty course](https://cybr.com/courses/aws-certified-security-specialty-course/)