Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
Security researchers at Wiz have identified a critical vulnerability pattern, dubbed GhostApproval, affecting six popular AI coding assistants. The flaw allows a…
A high-severity flaw in Amazon Q Developer could allow a malicious repository to execute commands and steal a developer's cloud credentials. The…
A vulnerability in Amazon Q Developer Language Server 1.69.0 and earlier allows malicious repositories to use symlinks to write to sensitive files…
A flaw in Amazon Q Developer could let malicious repositories run code through MCP configurations.