pwsh.exe

• When prompts become shells: RCE vulnerabilities in AI agent frameworks

  When prompts become shells: RCE vulnerabilities in AI agent frameworks New research exposes how prompt injection in AI agent frameworks can lead to remote code execution. Learn how these vulnerabilities work, what’s impacted, and how to secure your agents. The post When prompts

• AutoJack: How a single page can RCE the host running your AI agent

  AutoJack: How a single page can RCE the host running your AI agent AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authenticatio

• Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access

  Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe and Asia. The campaign uses photo-themed ZIP archives

All reports →