> TritonInfoSec News
Home / Jul 23, 2026 / Story
0
#6 The Hacker News general July 22, 2026 at 04:57 UTC

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

By [email protected] (The Hacker News)

AI Summary

A prompt injection flaw in Microsoft's official Azure DevOps MCP server allows an attacker to embed invisible instructions in pull request comments, hijacking AI code-review agents to exfiltrate data from repositories the attacker has no access to. The vulnerability exploits a missing prompt-injection guardrail in a tool that returns PR descriptions to the agent. As AI coding agents become standard in DevOps pipelines, this class of attack poses serious supply chain and data exfiltration risks.

Read full article → https://thehackernews.com/2026/07/microsoft-azure-…

Relevance score: 86.0/100

# More from July 23

  1. 1
    OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark The Hacker News
  2. 2
    Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA The Hacker News
  3. 3
    Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC The Hacker News
  4. 4
    Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data The Hacker News
  5. 5
    Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication The Hacker News
  6. 7
    CISA orders urgent action on actively exploited Langflow RCE flaw BleepingComputer
  7. 8
    Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs The Hacker News
  8. 9
    LG to Ban Residential Proxies from Smart TV Apps Krebs on Security
  9. 10
    AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code The Hacker News