Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution.Steer the agent to load an attacker’s web page, and that page’s JavaScript can reach a privileged local service on the same machine and spawn a process on the host.No credentials, no sign-in screen, and no further user interaction once
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/06/autojack-attack-lets-one-web-page.html
