cloud credentials breach

Amazon Q Developer extension vulnerability could have exposed cloud credentials | brief | SC Media — Photo by Anna Shvets on

3 Amazon Q Vulnerability Facts Exposing Developer Cloud Credentials

3 Amazon Q Vulnerability Facts Exposing Developer Cloud Credentials Amazon Q’s developer extension can read and leak AWS credential files, allowing attackers to hijack any notebook or CI/CD job that relies on those keys. The flaw stems from overly permissive permission defaults and an unchecked environment loader, which