MSRC

Microsoft researchers detailed an exploit chain called AutoJack that turns an AI browsing agent into a delivery vehicle for remote code execution. The flaw sits in AutoGen Studio, the open-source prot…

A security researcher disclosed a design flaw in GitHub's commit verification system that allows attackers to spoof verified commits by exploiting a mismatch between the author and committer fields. G…