AutoJack Attack: One Malicious Web Page Can Hijack AI Agents for Remote Code Execution
Microsoft researchers have disclosed a novel exploit chain named AutoJack that allows a single malicious web page to hijack an AI browsing…
Tag: Microsoft
AutoGen: Multi-Agent Conversation Framework
AutoGen is a framework developed by Microsoft for building multi-agent AI systems. It allows developers to create and manage multiple AI agents…
CVE-2026-26030: Microsoft Semantic Kernel Additional Command Injection Vulnerability
Another command injection vulnerability in Microsoft Semantic Kernel related to insecure shell command handling.
CVE-2026-25592: Microsoft Semantic Kernel Command Injection Vulnerability
A vulnerability in Microsoft's Semantic Kernel agent framework where model output reaching a shell can lead to command injection. Patched by Microsoft.
GitHub actions/checkout Update Blocks Pwn Request Attacks in CI/CD Pipelines
GitHub has announced a critical security update to its official actions/checkout action, effective June 18, 2026, designed to block common pwn request…
Azure Sentinel CI/CD Vulnerability
Microsoft's Azure Sentinel was found to have a CI/CD workflow weakness that allowed unauthenticated attackers to run code and steal credentials via…
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers at Novee Security have identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows unauthenticated attackers to hijack…
Amadey and StealC Malware Network Disrupted: 27 Million Stolen Credentials Recovered
A coordinated international law enforcement operation, supported by private sector partners including Bitdefender, Bitsight, ESET, and Microsoft, has successfully dismantled the criminal…
Microsoft — Cybersecurity company profile
Microsoft was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2008-4250 — Microsoft Windows Buffer Overflow Vulnerability
Microsoft Windows Buffer Overflow Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…