AWS Kiro Flaw: Hidden Web Page Text Could Trigger Remote Code Execution
A critical vulnerability in AWS Kiro, an agentic coding IDE, allowed a poisoned web page to rewrite its configuration file and execute…
A critical vulnerability in AWS Kiro, an agentic coding IDE, allowed a poisoned web page to rewrite its configuration file and execute…
Kiro is AWS's agentic coding IDE that can run shell commands, fetch URLs, and edit files. It was affected by a vulnerability…
A critical vulnerability in Cursor, an AI-powered code editor, allows arbitrary code execution on Windows when a user opens a cloned repository…
Proofpoint has uncovered a novel evasion technique called OAuth client ID spoofing, exploited by at least two threat actors to validate stolen…
UNK_pyreq2323 is a threat cluster that exploited OAuth client ID spoofing from January to March 2026, using over 700,000 spoofed client IDs…
Amazon Bedrock is a managed service by AWS for building generative AI applications. It hosts foundation models like Anthropic's Claude, which are…
Amazon SES is a cloud-based email delivery service used by Forg365 to send phishing emails, leveraging legitimate infrastructure to evade detection.
Cybersecurity researchers at Huntress have identified an intrusion where an unknown threat actor used a suspected AI-generated PowerShell script to enumerate Active…
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup…
AWS Bedrock Agents is a managed service from Amazon Web Services that enables developers to build and deploy AI agents. It integrates…