🚨 AWS Language Server Flaw!

CVE-2026-12957 allows zero-click command injection and cloud credential theft simply by opening a poisoned repository inside your IDE (affecting Amazon Q Developer).

https://denizhalil.com/2026/06/27/cve-2026-12957-aws-language-server-command-injection/

#CVE202612957 #aws #Cybersecurity #infosec #CloudSecurity

Backup cloud sicuro per Linux con versioning, storage immutabile e ripristino rapido e molto altro ancora il tutto tramite IDrive. #LinuxBackup #IDrive #SysAdmin #CloudSecurity #DisasterRecovery #Software

https://www.linuxeasy.org/idrive-linux-backup-immediato-sicuro-10-gb-gratuiti/?utm_source=mastodon&utm_medium=jetpack_social

👋 New here. AWS security engineer in Paris, AWS Community Builder.

I write open-source AWS security tooling: IAM privilege-escalation path detection, S3 / EC2 / Lambda misconfiguration scanners, and a tracker that records every change to AWS managed IAM policies over time.

Also maintain LocalEmu, a free local AWS emulator for testing without touching real accounts or credentials.

Here to learn from this community and share what I find. 🔒

#InfoSec #CloudSecurity #AWS #IAM #opensource #devsecops

A PDF feature can be turned into a window into your servers.

php-weasyprint (1.2M+ installs) fetched attacker-controlled URLs server-side. Cloud metadata and local files were both in reach.

Run it? Upgrade to 2.6.0. (CVE-2026-49359)

https://suriq.io/blog/php-weasyprint-ssrf-file-disclosure

#CVE #CloudSecurity #infosec #cybersecurity

Amazon AI Coding Tool Exposes Cloud Credentials to Malicious Git Repos

A security vulnerability in Amazon's AI coding assistant, tracked as CVE-2026-12957, allowed malicious Git repositories to access sensitive cloud credentials, raising concerns about informed consent and user security. The flaw enabled automatic execution of commands with no user prompt required.

https://osintsights.com/amazon-ai-coding-tool-exposes-cloud-credentials-to-malicious-git-repos?utm_source=mastodon&utm_medium=social

#AiCoding #Amazon #Cve202612957 #CloudSecurity #SupplyChain