AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution.
Steer the agent to load an attacker’s web page, and that page’s JavaScript can reach a privileged local service on the same machine and spawn a process on the host.
No credentials, no sign-in screen, and no further user interaction once
Source: The Hacker News
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth Cybersecurity researchers have flagged two previously undocumented Windows variants of what was believed to be a Linux-only backdoor called SprySOCKS. “The
Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa
Hacker News but for Independent Blogs Source: Hacker News