---
id: 4737
title: "Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundup"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/news/csp-bypass-smuggling-amazon-q"
published_at: "2025-08-22 07:07"
tags: ["csp", "gemini-cli", "roundup", "disk-cache", "http-smuggling", "amazon-q"]
phying_url: "https://phying.com/item/4737"
lang: en
---

# Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundup

## Summary

Roundup: Jorian Woltjer's nonce CSP bypass via bfcache and disk cache, d3d's trust-based HTTP smuggling C2 channel, Tracebit's Gemini CLI hijack, and the malicious Amazon Q pull request.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2025-08-22 07:07
- **Original:** https://www.yeswehack.com/news/csp-bypass-smuggling-amazon-q
- **Phying News:** https://phying.com/item/4737