Weekly Tech News: Microsoft AI Flaw, Uber Robotaxis, and Anthropic Export Controls
Weekly Tech News: Microsoft AI Flaw, Uber Robotaxis, and Anthropic Export Controls AutoJack Vulnerability: Microsoft Discloses RCE Flaw in AI Agents Microsoft researchers have uncovered a critical cybersecurity exploit chain dubbed AutoJack, which severely impacts web-enabled artificial intelligence agents. This AI vulnerability allows a single malicious webpage to hijack an AI browsing agent, executing arbitrary code on the host machine without requiring any user interaction beyond a URL click. By exploiting a combination of missing authentication on Model Context Protocol (MCP) endpoints, unsafe parameter handling, and an origin allowlist bypass, attackers can trigger Remote Code Execution (RCE). The AutoJack flaw specifically targets pre-release builds of AutoGen Studio, effectively turning the AI agent into a malware delivery vehicle by crossing the localhost trust boundary. Maintainers have since hardened the upstream main branch to mitigate this critical AI security risk. ...