AMAZON Q: NOW WITH HELPFUL AI-POWERED SELF-DESTRUCT CAPABILITIES

Summary from the TLDR InfoSec newsletter

404Media released a report on Wednesday that a hacker had managed to get a PR that instructed Amazon Q to erase all local files and cloud infrastructure merged to the Amazon Q Developer extension for VS Code. Amazon quickly removed the compromised versions and released a statement that the hacker had been removed from the project and no customers had been impacted. Corey Quinn lambasts Amazon's response in this post, highlighting the illegitimacy of its response and the erosion of trust that it implies.