← Back to feed
general The Hacker News

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

The Hacker News Microsoft

A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has ...

T1598
Read the full story The Hacker News →

Related Coverage

general Researchers Find Malware That Uses AI Models Instead of Human Hackers for Control GBHackers · Sep 23 general Prismor: Open-source runtime control plane for AI agents Help Net Security · Sep 23 general Hackers Exploit Check Point 0-Day Flaw to Execute Code on Management Servers GBHackers · Sep 23