Three independent security research teams found that AI coding assistants Amazon Q Developer, Claude Code, and Windsurf auto-execute workspace configurations before developers see a consent prompt, en…
AWS added Claude Sonnet 5 and the full GPT-5.6 family to its agentic IDE Kiro in July 2026, replacing Amazon Q Developer and enforcing a spec-driven development workflow that requires formal requireme…
On July 8, 2026, Wiz Security published GhostApproval, a vulnerability in six major AI coding assistants — Claude Code, Cursor, Amazon Q Developer, Windsurf, Augment, and Google Antigravity — that use…
Kiro, a spec-driven development agent that writes specs, auto-generates tasks, implements code, and automates DevOps workflows, has been listed in the coding agents category. The tool competes with al…
Anthropic launched Claude Code, a terminal-first agentic coding tool with Computer Use integration, multi-file edits, persistent shell sessions, Git operations, and fine-tuning support. The tool compe…
Cybersecurity firm Wiz discovered GhostApproval, a vulnerability affecting six major AI coding assistants including Amazon Q Developer, Anthropic Claude Code, and Cursor, that allows attackers to esca…
Security researchers discovered GhostApproval, a vulnerability affecting six major AI coding assistants including Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, and Wi…
Security firm Wiz discovered a flaw called GhostApproval in six popular AI coding assistants—Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf—that allows …
Security firm Wiz discovered a vulnerability named GhostApproval in six AI coding assistants, including Amazon Q Developer and Google Antigravity, that allows attackers to trick agents into accessing …
Banks are rapidly adopting agentic AI systems that can take actions, not just answer questions, creating a new security risk of overprivileged agents. In April 2026, Five Eyes cyber agencies issued jo…
G2 published a comparison of the best AI coding assistants for 2026, evaluating tools like GitHub Copilot, Cursor, Claude, and Replit beyond simple autocomplete. The analysis covers codebase understan…
A developer tested seven AI developer tools in real-world workflows and found that GitHub Copilot, Cursor, Perplexity, and Warp saved significant time, while Amazon Q Developer, Codeium, and Replit's …
Amazon Q Developer's VS Code extension automatically executed MCP server configurations from workspace files without user consent, exposing AWS credentials. Wiz Research disclosed CVE-2026-12957 (CVSS…
A vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed attackers to steal AWS credentials by tricking developers into opening a malicious repository. The fl…
A flaw in Amazon Q Developer allowed malicious repositories to inject rogue Model Context Protocol (MCP) configurations, leading to arbitrary code execution. The vulnerability exploited the agent's tr…
A high-severity vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed malicious Git repositories to execute arbitrary commands and exfiltrate AWS credentials…
A high-severity flaw in Amazon Q Developer allowed malicious code repositories to silently execute commands on developers' machines and steal AWS credentials. Wiz Research discovered the vulnerability…
A high-severity vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed malicious repositories to execute arbitrary code and exfiltrate cloud credentials when …
A developer has raised concerns about AI coding tools transmitting source code to external servers, detailing how tools like Cursor, GitHub Copilot, Claude Code, and Amazon Q Developer send code snipp…
By mid-2026, AI-assisted development is the default, with over 80% of developers using AI tools weekly. However, every major tool sends code to third-party servers, and context window growth to 200K-5…