Microsoft fixes AutoGen Studio flaw that enabled code execution

A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers ...
IEEE

A Comprehensive Survey and Tutorial on Smart Vehicles: Emerging Technologies, Security Issues, and Solutions Using Machine Learning

Abstract: According to research, the vast majority of road accidents (90%) are the result of human error, with only a small percentage (2%) being caused by malfunctions in the vehicle. Smart vehicles ...
The Hacker News

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...
IEEE

Agents4PLC: Automating Closed-Loop PLC Code Generation and Verification in Industrial Control Systems Using LLM-Based Agents

Abstract: In industrial control systems, the generation and verification of Programmable Logic Controller (PLC) code are crucial for ensuring operational efficiency and safety. While Large Language ...
GitHub

JavaScript captcha solver (Node.js): Bypass reCAPTCHA, Cloudflare, GeeTest and more

Use the JavaScript captcha solver to automatically bypass any captcha - including reCAPTCHA v2, Invisible, v3, Enterprise, Cloudflare Turnstile, GeeTest sliders, Amazon WAF, FunCaptcha, and both image ...
Bleeping Computer

VS Code zero-day lets hackers steal GitHub tokens in one click

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...
Indiatimes

Microsoft tells engineers to stop using Anthropic's Claude, as canceling Claude Code licenses becomes an easy way to…

Microsoft is canceling most internal Claude Code licenses by June 30, pushing engineers to its own GitHub Copilot CLI. The catch? Anthropic's tool got too popular, undercutting Microsoft's homegrown ...
People Matters

Microsoft cancels Claude Code licences after engineers use it too much

The tech giant is scaling back use of Anthropic’s AI coding assistant inside key engineering teams as rising enterprise AI costs force companies to rethink large-scale deployments. Microsoft is ...
The Next Web

Microsoft’s quiet Claude Code retreat and the real cost of enterprise AI

In December of last year, Microsoft told thousands of its engineers, product managers and designers that they could use Claude Code, Anthropic’s command-line coding agent, on the company dime. By ...
cybernews

Microsoft to drop Claude Code by June 30th after burning through yearly AI budget in months

After inviting thousands of developers to use Anthropic's Claude Code in December, Microsoft exhausted its annual AI budget due to token-based billing and is now terminating licenses by June 30th.