Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
2026-06-26T19:24:04Z•39532f5e9fd118975910c4d42e8a7e67a83cd0b283a9be28c520631a38ed9a89
CVE-2026-12569ai-threatsakritesawscloud-credential-theftfive-eyesklue-breachknown-exploited-vulnerabilitylinux-foundationmacos-gaslightmalicious-repositoriespolymarketptc-windchillscattered-spidersecurity-fundingstockstaysupply-chainthird-party-compromiseturla
What happened
Multiple security developments: AWS patched an Amazon Q vulnerability that enabled cloud credential theft via malicious repositories and published an advisory; CISA added the PTC Windchill remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog following first-seen exploitation in the wild. Other notable incidents include ~ $3M stolen from Polymarket after a third‑party vendor compromise, Turla using a new ‘StockStay’ backdoor against Ukrainian government/military targets, additional victims identified in the Klue-Salesforce breach, and reports of macOS ‘Gasl
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 39532f5e9fd118975910c4d42e8a7e67a83cd0b283a9be28c520631a38ed9a89
- Enrichment time
- 2026-06-26T19:24:04Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.