Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

During a keynote at re:Invent 2022 today, Amazon announced CodeCatalyst, a service designed to take away the heavy lifting of working across different codebases, tools and environments to build apps.

On the heels of the debut of its Bedrock service for building generative AI apps, Amazon has launched a new enterprise plan for CodeWhisperer, its AI-powered service to generate and suggest code. The ...

Amazon Q Developer works well for completing lines of code, doc strings, and if/for/while/try code blocks, but can’t generate full functions for certain use cases. When I reviewed Amazon CodeWhisperer ...

A hacker planted data wiping code in a version of Amazon's generative AI-powered assistant, the Q Developer Extension for Visual Studio Code. Amazon Q is a free extension that uses generative AI to ...