Adversaries could plant a malicious repository that can execute arbitrary code and steal cloud credentials by exploiting the vulnerability, which showcases growing MCP risk. This story comes via www.darkreading.com. The full article is available at the source link below. Frank will update this post as more details emerge. Stay tuned for more coverage on this topic.

Source: https://www.darkreading.com/cloud-security/amazon-q-vs-extension-flaw-leads-cloud-credential-theft