CVE-2026-12957 2

Vulnerability (CVE)

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

A high-severity flaw in Amazon Q Developer, tracked as CVE-2026-12957 with a CVSS score of 8.5, let a malicious repository run commands and steal a developer's cloud credentials by having the assistant read an MCP configuration file, .amazonq/mcp.json,...

Vulnerabilities & Patching

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

Cyber Risks The Hacker News

This week's recap details DirtyClone (CVE-2026-43503), a new variant of the Dirty Frag Linux kernel flaw that lets local users gain root privileges via cloned packets, working on Debian, Ubuntu, and Fedora with default namespace configurations. JFrog said...

Malware