A high-severity vulnerability (CVE-2026-12957) in Amazon Q Developer for Visual Studio Code allowed attackers to execute arbitrary code and steal AWS credentials by automatically loading malicious MCP server…
11 articles · Updated June 26, 2026
Recent Intelligence Reports
Amazon Q Vulnerability— www.wiz.io · June 29, 2026