POWER LEAK: AMAZON KIRO IDE PROMPT INJECTION ENABLES DATA EXFILTRATION

Summary from the TLDR InfoSec newsletter

A crafted Kiro workspace can direct the agent to read .env data, place it in powersRecommendationUrl, and invoke Kiro Powers. The IDE then fetches the attacker-controlled URL with the secret in its query string. Mindgard reproduced the path in trusted and untrusted workspaces, and Amazon fixed the reported behavior in Kiro IDE 0.8.140.