AWS fixed a Kiro prompt injection chain that rewrote mcp.json and launched attacker-controlled code with developer privileges ...
Having a large boot disk is a curse and a blessing ...