Individual human neurons may be far more powerful computing units than previously understood.
AWS fixed a Kiro prompt injection chain that rewrote mcp.json and launched attacker-controlled code with developer privileges, bypassing approval.