A flaw in Amazon Q Developer allowed malicious repositories to inject rogue Model Context Protocol (MCP) configurations, leading to arbitrary code execution. The vulnerability exploited the agent's tr…
A high-severity vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed malicious Git repositories to execute arbitrary commands and exfiltrate AWS credentials…
A high-severity flaw in Amazon Q Developer allowed malicious code repositories to silently execute commands on developers' machines and steal AWS credentials. Wiz Research discovered the vulnerability…
A high-severity vulnerability in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, allowed malicious repositories to execute arbitrary code and exfiltrate cloud credentials when …
A developer has raised concerns about AI coding tools transmitting source code to external servers, detailing how tools like Cursor, GitHub Copilot, Claude Code, and Amazon Q Developer send code snipp…
By mid-2026, AI-assisted development is the default, with over 80% of developers using AI tools weekly. However, every major tool sends code to third-party servers, and context window growth to 200K-5…
A developer's 2026 guide compares GitHub Copilot, Cursor, Windsurf, Tabnine, and Amazon Q Developer across real codebases. The analysis highlights that context windows now hold entire repositories, mo…
Amazon Bedrock AgentCore harness is now generally available, enabling developers to build production-grade AI agents in minutes with two API calls. The managed abstraction handles sandboxed compute, m…
CircleCI released an official MCP Server that gives AI coding agents read access to pipeline data, allowing them to query build failures, test results, and config validation directly without manual co…
AWS Summit New York opens tomorrow at Javits Center, unveiling Kiro Pro Max at $100/month, new Amazon Bedrock AgentCore capabilities, and Gemma 4 models on Bedrock. The announcements signal AWS's inte…
OpenDevOps, an open-source multi-cloud DevOps agent for AWS and Azure, was released, enabling incident investigation with any LLM via LiteLLM. In benchmarks, it found root causes for 9 out of 10 incid…
AI-powered DevOps tools are enabling software teams to accelerate delivery, improve system reliability, and cut operational costs by automating complex tasks across the development lifecycle. Industry…