CloudSecurityWeek4 days ago
Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
_Kiattisak_Lamchan_Alamy.png%3Fquality%3D80%26disable%3Dupscale&w=828&q=80&output=webp&we)
1 min read
A vulnerability in the Amazon Q VS Code extension allowed adversaries to plant malicious repositories that could execute arbitrary code and steal cloud credentials. AWS has patched the flaw and published an advisory. The issue highlights growing risks from the Model Context Protocol.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
