Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers.

The security flaw, which does not have a CVE identifier, works against Kiro IDE 0.7.45 on Windows, according to Mindguard. The latest version of

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Show HN: We Implemented the IPv8 Internet-Draft in Linux, Libc, and BGP

Show HN: We Implemented the IPv8 Internet-Draft in Linux, Libc, and BGP Source: Hacker News

Read More

Carbon-aware electricity pricing, measured daily on 38 grids

Carbon-aware electricity pricing, measured daily on 38 grids Source: Hacker News

Read More

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited

Read More