AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Notícia de segurança recolhida automaticamente.

Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution.

Steer the agent to load an attacker's web page, and that page's JavaScript can reach a privileged local service on the same machine and spawn a process on the host.

No credentials, no sign-in screen, and no further user interaction once

Fonte original: Ler artigo completo aqui