Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

August 27, 2026 · 1:39 pm 2 sources

Image: The Hacker News

Coverage

More coverage

• Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
  The Hacker News · August 27, 2026 13:39
  Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE…
• AWS Open Sources Kiro Crew for Asynchronous Coding Agents
  InfoQ · August 30, 2026 08:23
  Amazon recently announced Kiro Crew, an open-source system for running multiple Kiro coding agents across sessions, tools, and tasks. The new workspace lets developers assign asynchronous coding tasks to AI agents, allowing work such as incident investigation, ticket triage, migrations, and PR…