The Hacker News June 26, 2026

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

Amazon patched CVE-2026-12957, a high-severity Amazon Q Developer flaw that let malicious MCP config run commands and steal AWS credentials.

More like this

Apple @ Work: Most IT leaders want AI to help manage their Macs, but few are ready for it

9 to 5 Mac

Top Stories: Apple Leaks - Camera-Equipped AirPods, Beats 360, and More

Mac Rumors

ChatGPT’s iPhone app gets a handy shortcut to attach recent photos more quickly

9 to 5 Mac