INTEL_REPORT
Microsoft Security Blog · published 6/19/2026, 12:17:54 AM · TLP amber
Summary
Ingested excerpt (first ~500 chars of normalized text).
AutoJack: How a single page can RCE the host running your AI agent AutoJack is a novel exploit chain showing how a single malicious webpage can turn an AI browsing agent into a remote code execution vector on the host machine. By abusing trust in localhost, missing authentication, and unsafe parameter handling, attackers can trigger arbitrary process execution through AutoGen Studio’s MCP WebSocket. The research highlights a broader pattern - when agents can browse untrusted…
https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent
sha256:8f1d80a65f14c88ce965fd459d21028c48facc6b526991902072efd5f1edcd89
What we pulled out
Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).
Indicators
Linked with report → mentions → indicator. Values open the indicator workspace.
Malware families
Allowlist token matches only.
Threat actors mentioned
Allowlist mentions — not a formal attribution verdict.
ATT&CK techniques
MITRE IDs referenced in text and present in local technique table.
CONTINUE INVESTIGATION
High-signal pivots without leaving the thread you started in search.
Browse the report corpus.
Neighborhood from the first linked indicator.
| Open → |
| domain | mshta.exe | Open → |
| domain | calc.exe | Open → |
| domain | pwsh.exe | Open → |
| domain | bash.exe | Open → |
| domain | wsl.exe | Open → |
| domain | regsvr32.exe | Open → |
| domain | bitsadmin.exe | Open → |
| domain | curl.exe | Open → |
| domain | wget.exe | Open → |
| domain | pyproject.toml | Open → |
| domain | app.py | Open → |
| domain | node.exe | Open → |
| domain | microsoft.com | Open → |
| domain | json.loads | Open → |
| domain | pythonw.exe | Open → |
| ip | 0.4.2.2 | Open → |
| domain | evil.com | Open → |
| domain | request.url.path.startswith | Open → |
| domain | config.yaml | Open → |
| domain | router.websocket | Open → |
| domain | stdioserverparams.command | Open → |
| domain | stdioserverparams.args | Open → |
| domain | mcp.py | Open → |
| domain | learn.microsoft.com | Open → |
| domain | msft.net | Open → |
| domain | office.com | Open → |
| domain | left.processid | Open → |
| domain | right.initiatingprocessid | Open → |
| url | https://evil.com | Open → |
| url | http://attacker.example/websocket-interactive | Open → |
| url | https://learn.microsoft.com/en-us/azure/ai-services/content-safety/concepts/jailbreak-detection | Open → |
| url | https://learn.microsoft.com/en-us/azure/defender-for-cloud/ai-threat-protection | Open → |
| url | https://learn.microsoft.com/en-us/azure/defender-for-cloud/ai-security-posture | Open → |
| url | https://learn.microsoft.com/en-us/azure/foundry/concepts/ai-red-teaming-agent | Open → |
| url | https://github.com/microsoft/PyRIT | Open → |
| url | https://learn.microsoft.com/en-us/defender-endpoint/ | Open → |
| url | https://learn.microsoft.com/en-us/defender-endpoint/network-protection | Open → |
| url | https://learn.microsoft.com/en-us/defender-endpoint/web-content-filtering | Open → |
| url | https://learn.microsoft.com/en-us/defender-vulnerability-management/ | Open → |
| url | https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview | Open → |
| url | https://www.microsoft.com/en-us/security/blog/2025/05/19/announcing-microsoft-entra-agent-id-secure-and-manage-your-ai-agents/ | Open → |
| url | https://learn.microsoft.com/en-us/defender-for-identity/what-is | Open → |
| url | https://learn.microsoft.com/en-us/azure/dev-box/overview-what-is-microsoft-dev-box | Open → |
| url | https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview | Open → |
| url | https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-devops-introduction | Open → |
| url | https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-overview | Open → |
| url | https://learn.microsoft.com/en-us/copilot/security/microsoft-security-copilot | Open → |