Vulnerabilities
Upgrade DynamoDB MCP Server to Stop Code Execution on Hosts
A flaw in the open-source AWS tool lets attackers run commands on servers via crafted database model names. Update to version 2.1.6 immediately.
AWS
Everything Shell Bulletin has reported about AWS: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Install Kiro IDE 0.8.140 Now to Prevent RCE from Malicious Color Theme Names in Trusted Workspaces
AWS patches a cross-site scripting flaw in Kiro IDE that lets attackers run code through malicious color theme names when users open workspaces.
Vulnerabilities
Audit Bedrock Agent Imports Immediately to Mitigate AWS Code Injection Risks
Small businesses using AWS Bedrock development tools must verify import sources after AWS disclosed injection flaws in its starter toolkit.