Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
2026-06-26T19:23:57Z•b23668e4d84a8f4811bd8e1f266d87898885b6b604ec6546b5a966c8bd6d84ad
AI-assisted-attacksCiscoFortinetaccess-brokerbackdoorcloud-credentialsdata-breachdeveloper-toolinggit-repoiOS-bootrommass-compromisenpmransomwareremote-code-executionsupply-chainvulnerability-management
What happened
A cluster of high-impact security stories: a flaw in Amazon Q allowed malicious Git repositories to execute project-config commands and steal cloud credentials — highlighting risks from developer toolchain/config execution and AI coding assistants. Supply-chain and developer-targeting attacks continue with the Miasma campaign poisoning 20+ npm packages to harvest credentials and compromise maintainers. Active threats and access-sales include a self‑destructing Mistic backdoor tied to an access broker selling corporate footholds to ransomware groups. Large-scale compromises and exploited vendor
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- theregister_security
- Record identifier
- b23668e4d84a8f4811bd8e1f266d87898885b6b604ec6546b5a966c8bd6d84ad
- Enrichment time
- 2026-06-26T19:23:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.