Security firm Wiz discovered a flaw called GhostApproval in six popular AI coding assistants—Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf—that allows …
Security firm Wiz discovered a vulnerability named GhostApproval in six AI coding assistants, including Amazon Q Developer and Google Antigravity, that allows attackers to trick agents into accessing …
Banks are rapidly adopting agentic AI systems that can take actions, not just answer questions, creating a new security risk of overprivileged agents. In April 2026, Five Eyes cyber agencies issued jo…
G2 published a comparison of the best AI coding assistants for 2026, evaluating tools like GitHub Copilot, Cursor, Claude, and Replit beyond simple autocomplete. The analysis covers codebase understan…
A developer tested seven AI developer tools in real-world workflows and found that GitHub Copilot, Cursor, Perplexity, and Warp saved significant time, while Amazon Q Developer, Codeium, and Replit's …
Amazon Q Developer's VS Code extension automatically executed MCP server configurations from workspace files without user consent, exposing AWS credentials. Wiz Research disclosed CVE-2026-12957 (CVSS…
A vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed attackers to steal AWS credentials by tricking developers into opening a malicious repository. The fl…
A flaw in Amazon Q Developer allowed malicious repositories to inject rogue Model Context Protocol (MCP) configurations, leading to arbitrary code execution. The vulnerability exploited the agent's tr…
A high-severity vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed malicious Git repositories to execute arbitrary commands and exfiltrate AWS credentials…
A high-severity flaw in Amazon Q Developer allowed malicious code repositories to silently execute commands on developers' machines and steal AWS credentials. Wiz Research discovered the vulnerability…
A high-severity vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed malicious repositories to execute arbitrary code and exfiltrate cloud credentials when …
A developer has raised concerns about AI coding tools transmitting source code to external servers, detailing how tools like Cursor, GitHub Copilot, Claude Code, and Amazon Q Developer send code snipp…
By mid-2026, AI-assisted development is the default, with over 80% of developers using AI tools weekly. However, every major tool sends code to third-party servers, and context window growth to 200K-5…
A developer's 2026 guide compares GitHub Copilot, Cursor, Windsurf, Tabnine, and Amazon Q Developer across real codebases. The analysis highlights that context windows now hold entire repositories, mo…
Amazon Bedrock AgentCore harness is now generally available, enabling developers to build production-grade AI agents in minutes with two API calls. The managed abstraction handles sandboxed compute, m…
CircleCI released an official MCP Server that gives AI coding agents read access to pipeline data, allowing them to query build failures, test results, and config validation directly without manual co…
AWS Summit New York opens tomorrow at Javits Center, unveiling Kiro Pro Max at $100/month, new Amazon Bedrock AgentCore capabilities, and Gemma 4 models on Bedrock. The announcements signal AWS's inte…
OpenDevOps, an open-source multi-cloud DevOps agent for AWS and Azure, was released, enabling incident investigation with any LLM via LiteLLM. In benchmarks, it found root causes for 9 out of 10 incid…
AI-powered DevOps tools are enabling software teams to accelerate delivery, improve system reliability, and cut operational costs by automating complex tasks across the development lifecycle. Industry…
The Amazon Q Developer CLI has been rebranded and replaced by the new Kiro CLI, reflecting a shift from a simple terminal chatbot to a more advanced "agentic IDE" tool. Unlike its predecessor, Kiro CL…