Security researcher Johann Rehberger disclosed a chain of vulnerabilities in Microsoft Copilot, assigned CVE-2026-24299, that allowed persistent data exfiltration via HTML preview, delayed tool invoca…
A proof-of-concept attack from the En Klype Salt team shows prompt-injection payloads self-replicating through Microsoft 365 Copilot in Word, propagating from one business document to another via ordi…
Manifold Security disclosed on July 21 that hidden HTML comments in Azure DevOps pull-request descriptions can inject instructions into AI agents using Microsoft's official MCP server, enabling cross-…
Microsoft researchers detailed an exploit chain called AutoJack that turns an AI browsing agent into a delivery vehicle for remote code execution. The flaw sits in AutoGen Studio, the open-source prot…
A security researcher disclosed a design flaw in GitHub's commit verification system that allows attackers to spoof verified commits by exploiting a mismatch between the author and committer fields. G…