AutoJack lets a web page hijack an AI browsing agent to execute code on host.

Microsoft researchers detailed an exploit chain dubbed AutoJack that enables remote code execution on Windows via an attacker-controlled web page. JavaScript on the page can cause an AI browsing agent to interact with a privileged local service and spawn a process on the host without credentials or further user action. The exposure involves vulnerable AI browsing agents and identity components on Windows systems, with manufacturing environments called out as notably at risk. No CVEs were provided, and the public technical specifics appear limited, but the described chain results in full host compromise from a single page load. Until vendor advisories land, restrict or disable AI browsing agent features, block browser access to localhost-style privileged services where feasible, monitor for browser or local-service spawned processes on Windows, and segment manufacturing workstations to contain potential drive-by RCE. Read the full daily briefing: https://kernelpanicbrief.substack.com Recommended tool: Disclosure: This section contains paid affiliate links. We may earn a commission if you purchase through these links. - Sophos: Endpoint and malware protection for Windows, Linux, and business environments where malware, ransomware, exploited vulnerabilities, or privilege escalation matter. https://prf.hn/l/ojNAEE2/ #cybersecurity #infosec #shorts #vulnerability

Видео AutoJack lets a web page hijack an AI browsing agent to execute code on host. канала The Kernel Panic Brief