Get the latest tech news
Hacker slips malicious 'wiping' command into Amazon's Q AI coding assistant
Had Q executed this, it would have erased local files and, under certain conditions, dismantled AWS cloud infrastructure.
If the coding assistant had executed this, it would have erased local files and, if triggered under certain conditions, could have dismantled a company's Amazon Web Services (AWS) cloud infrastructure. The real problem was that this potentially dangerous update had somehow passed Amazon's verification process and was included in a public release of the tool earlier in July. Moreover, as 404Media, which broke the story, reported, once the incident surfaced, Amazon quietly removed the compromised version of the Q Developer extension from the Visual Studio Code Marketplace, without a changelog note, advisory, or Common Vulnerabilities and Exposures (CVE) entry.
Or read this on ZDNet
