Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

Dark Reading 2 weeks, 5 days ago

Amazon Q VS Extension Flaw Leads to Cloud Credential Theft

Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk.

More from Dark Reading 29 Jun 2026, 11:44 p.m. Incident · 3 stories Amazon (company) Cloud Credentials Flaw Theft Vulnerability

The Hacker News 3 weeks, 1 day ago

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer's cloud credentials. The path was short: a developer opens the repo, trusts the workspace, and Amazon Q does the rest. Amazon has patched it

More from The Hacker News 27 Jun 2026, 1:53 a.m. Incident · 3 stories Amazon (company) Artificial Intelligence Cloud Credentials CVE Flaw Patch Theft

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

Amazon Q VS Extension Flaw Leads to Cloud Credential Theft

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs