The Next Web

One symlink trick breaks 6 top AI coding agents, from Amazon

Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.
SecurityWeek

Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories

Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...
ITmedia

「Amazon CodeCatalyst」が正式サービスに AWS上で開発環境一式、コード ...

この記事は新野淳一氏のブログ「Publickey」に掲載された「「AWS上で開発環境一式、コードリポジトリからテンプレート ...
CodeZine（コードジン）

Amazon CodeCatalyst、リポジトリ拡張機能がGitLab.comとBitBucket Cloudでも ...

Developers Summit 2026・Dev x PM Day 講演資料まとめ Developers Boost 2025 講演資料まとめ Developers X Summit 2025 講演資料まとめ Developers Summit 2025 FUKUOKA 講演関連資料まとめ Developers Summit 2025 KANSAI 講演関連資料まとめ ...
Dark Reading

Amazon Q VS Extension Flaw Leads to Cloud Credential Theft

Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk.