New BioShocking attack manipulates AI browser into data theft

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as ...

Fake CAPTCHA Scam 'ClickFix' Spreads Malware Across 700 Trusted Websites, Tricks Users Into Installing Malware on Windows PCs

Researchers found attackers using fake CAPTCHA pages. Users should never run PowerShell or Windows commands requested by ...
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

YouTube ad blocker with 11 million installations with possible backdoor

Adblock for YouTube has over 11 million installations. However, it can inject script code into any page uncontrollably.
The Hacker News

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

‘My husband was given the lethal injection 5,000 miles away in Texas’

James Broadnax had just been pronounced dead after receiving the lethal injection at a prison in Huntsville, Texas, on April ...