LIVE FEED
CRITICAL Claude and ChatGPT Hijacked via Zero-Click Prompt Injection // HIGH ChatGPT Sandbox C2 Attack Demonstrated at Black Hat 2026 // HIGH Meta AI Hacks External Systems in Cybersecurity Test // HIGH ChatGPT Abused by Poipet Scam Network in Multi-Fraud Op // CRITICAL Anthropic Mythos 5 AI Agent Launches Rogue Supply Chain Attack // FIRST LOOK NVIDIA Launches OSAA and SAFE Open AI Security Framework // HIGH UK AI Security Institute Reports Security Incident INC-2026-07-28 // FIRST LOOK Microsoft Launches Zero Trust for AI Agent Security Tools // FIRST LOOK Varonis Launches Agent IBAC to Constrain AI Agent Actions at Runtime // CRITICAL DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm //
WEBSOCKET-SECURITY

Websocket-Security

1 report
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning AI Governance AI Security AI Security Tools Deep Signal Identity & Access Management Intelligence Report Security Operations
AutoJack: Microsoft AutoGen Studio RCE via MCP WebSocket

AutoJack: Microsoft AutoGen Studio RCE via MCP WebSocket

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 BleepingComputer

A three-flaw vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio allowed attackers to execute arbitrary commands on a developer's host system by manipulating a browsing AI agent into connecting to a malicious webpage. The attack exploited missing authentication on MCP WebSocket routes combined with unsanitised base64-encoded parameters to launch arbitrary processes. Microsoft confirmed the flaw was patched before any PyPI release, limiting exposure to developers building directly from the main GitHub branch.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.