Amazon Q vulnerability allowed malicious Git repositories to steal cloud credentials

IT News

Friday at 18:15

5 Visninger

0 Kommentarer

Amazon Q vulnerability allowed malicious Git repositories to steal cloud credentials

A high-severity vulnerability in the Amazon Q Developer extension for Visual Studio Code allowed attackers to execute arbitrary code on a developer's workstation. The flaw, tracked as CVE-2026-12957, stemmed from the automatic loading of Model Context Protocol (MCP) configurations found within a repository's hidden directory. When a developer...

Læs hele artiklen hos kilden.

Læs original artikel

Var dette nyttigt?

Del:

Kommentarer (0)

Vennligst logg inn for å skrive en kommentar

Ingen kommentarer ennå. Bli den første til å kommentere!

Relaterede nyheder

I don't even use a Mac, but this is still my favorite way to install software

7 hours ago

California Sheriff Says Their Drone Disarmed a Suspect, Shares Video on Instagram

7 hours ago

Every USB-C cable looks identical, but this tiny chip tells you which ones actually work

7 hours ago

Lenke kopiert til utklippstavlen

Amazon Q vulnerability allowed malicious Git repositories to steal cloud credentials

Kommentarer (0)

Relaterede nyheder

I don't even use a Mac, but this is still my favorite way to install software

California Sheriff Says Their Drone Disarmed a Suspect, Shares Video on Instagram

Every USB-C cable looks identical, but this tiny chip tells you which ones actually work

Windows 11's latest update made my ultrawide make sense again

Non-Invasive Stimulation of the Brain Ended Opioid Addiction, Cigarette Craving

Gennemse efter kategori