Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A critical vulnerability in Microsoft's official Azure DevOps MCP server allows attackers to inject hidden HTML comments into pull request descriptions, which…
Tag: confused deputy
LayerX Previously Discovered ClaudeBleed Flaw
LayerX identified the ClaudeBleed confused-deputy vulnerability in Claude for Chrome earlier in 2026.