Microsoft's AutoJack research, published June 18, demonstrates a confused-deputy attack where an AI agent's headless browser can be tricked into reaching localhost services from the public internet. T…
Microsoft's Defender Security Research Team disclosed AutoJack on June 18, 2026, a chained exploit that achieves host-level remote code execution via AI browsing agents in AutoGen Studio pre-release b…
Microsoft disclosed AutoJack on June 18, a three-vulnerability chain in AutoGen Studio that lets a single malicious web page execute arbitrary code on the host running an AI agent, without requiring u…
IT Security News reports a new exploit chain called AutoJack that converts AI browsing agents into remote code execution vectors by abusing trust in localhost, missing authentication, and unsafe param…