Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories

A number of high-impact cyber incidents and security developments were reported: AWS patched an “Q” flaw that could enable cloud credential theft via malicious repositories; PTC Windchill remote code execution (CVE-2026-12569) has been observed in the wild and added to CISA’s Known Exploited Vulnerabilities catalog; roughly two dozen victims tied to the Klue–Salesforce breach have been identified; Polymarket lost about $3M after attackers abused a third‑party vendor compromise; Russian APT Turla deployed a new ‘StockStay’ backdoor against Ukrainian government and military targets. Other items: