CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...
Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk ...
Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...
Amazon Web Services Inc. today announced a preview for its agentic artificial intelligence software development assistant Q Developer for Microsoft Corp.’s open-source code repository GitHub. Millions ...
Hosted on MSN
Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE
Amazon has quietly fixed a couple of security issues in its coding agent: Amazon Q Developer VS Code extension. Attackers could use these vulns to leak secrets, including API keys from a developer's ...
Amazon Q Developer, Amazon Web Services Inc.’s artificial intelligence software development assistant, today announced support for inline chat that combines the ability to invoke assistants within ...
The Amazon Q Developer VS Code Extension is reportedly vulnerable to stealthy prompt injection attacks using invisible Unicode Tag characters. According to the author of the “Embrace The Red” blog, ...
A hacker planted data wiping code in a version of Amazon's generative AI-powered assistant, the Q Developer Extension for Visual Studio Code. Amazon Q is a free extension that uses generative AI to ...
LAS VEGAS--(BUSINESS WIRE)--At AWS re:Invent, Amazon Web Services, Inc. (AWS), an Amazon.com, Inc. company (NASDAQ: AMZN), today announced new enhancements to Amazon Q Developer, including agents that ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results