Curated security research, vulnerabilities, advisories and tools for practitioners.

#amazon-q

Security coverage tagged amazon-q.

1.

MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

blog | 2026-06-26 12:00 | CVE-2026-12957 | wiz.io | original ↗ | #cloud | #vulnerability-research | #credential-theft

2.

Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundup

blog | 2025-08-22 07:07 | yeswehack.com | original ↗ | #csp | #gemini-cli | #roundup

3.

Introducing new Amazon Q Developer plugin for Wiz

blog | 2024-11-14 12:48 | wiz.io | original ↗ | #ai-security | #cloud | #aws