Microsoft's AutoJack research, published June 18, demonstrates a confused-deputy attack where an AI agent's headless browser can be tricked into reaching localhost services from the public internet. T…
Microsoft's Defender Security Research Team disclosed AutoJack on June 18, 2026, a chained exploit that achieves host-level remote code execution via AI browsing agents in AutoGen Studio pre-release b…
Microsoft disclosed AutoJack on June 18, a three-vulnerability chain in AutoGen Studio that lets a single malicious web page execute arbitrary code on the host running an AI agent, without requiring u…
Microsoft researchers detailed an exploit chain called AutoJack that turns an AI browsing agent into a delivery vehicle for remote code execution. The flaw sits in AutoGen Studio, the open-source prot…
IT Security News reports a new exploit chain called AutoJack that converts AI browsing agents into remote code execution vectors by abusing trust in localhost, missing authentication, and unsafe param…