bartek@aws: ~/news
$ whoami

Bartek Chojnacki

$ AWS Architect · DevOps · Cloud
Thursday, June 25, 2026
Wednesday, June 24, 2026
Tuesday, June 23, 2026

Critical Security Fixes for Amazon Q Developer Language Servers

Amazon Q Developer IDE plugins (VS Code, JetBrains, Eclipse, Visual Studio) need urgent updates due to two vulnerabilities in Language Servers for AWS. CVE-2026-12957 allows malicious workspace configs to execute commands if you trust the workspace, while CVE-2026-12958 exploits symlink validation gaps. Update to Language Servers for AWS 1.69.0 or your IDE plugin's latest version immediately—user action is required.

source: [aws/security-bulletin]

AWS Transform Custom: Handle Your Codebase's Unique Refactoring Needs

Tired of wrestling with generic migration tools that don't understand your team's quirks? AWS Transform custom lets you build and run code transformations directly in your editor, tackling the custom work that off-the-shelf tools skip—like migrating internal libraries, enforcing error-handling standards, or standardizing logging across your services.

source: [aws/devops-blog]