importantSYS.SOURCE: The Hacker News• 2026-07-22T10:27:52+05:30

Microsoft Azure DevOps MCP Server Vulnerability Allows Hidden PR Comments to Manipulate AI Review Agents

#ai #vulnerability #security #devops

A vulnerability in Microsoft Azure DevOps MCP server allows hidden PR comments to manipulate AI review agents into accessing unauthorized projects and leaking data. The flaw exploits a missing prompt-injection guardrail in pull request descriptions, enabling attackers to leverage reviewer credentials for cross-project actions.

A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds.

The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one of its tools returns pull request descriptions without a prompt-injection guardrail the company had

Read original article

*** END OF TRANSMISSION ***

> OPENAI AI INCIDENT: UNSECURED SANDBOX LEADS TO CYBER-ATTACK ON HUGGING FACE > ENHANCING SOC EFFECTIVENESS THROUGH MULTI-LAYERED NETWORK DETECTION STRATEGIES > OVERPAID: REEVALUATING EXECUTIVE LEADERSHIP AND STRATEGIC HIRING PRACTICES > GLOW AI LAUNCHES WITH $1.2B VALUATION TO REVOLUTIONIZE ENDPOINT SECURITY IN THE AI ERA > SYNTHESIA INTRODUCES AI-POWERED LIVE COACHING FOR ENTERPRISE TRAINING > LAW ENFORCEMENT DISRUPTS KRATOS PHISHING KIT TARGETING MICROSOFT 365 AUTHENTICATION > TROJANIZED NEWTONSOFT.JSON FORK EXPLOITS GAME-RIGGING VULNERABILITY IN NUGET PACKAGE > READKINETIC: A FREE, LOCAL-FIRST SPEED READER FOR PERSONAL BOOKS > OPENAIM: A TECHNICAL FPS AIM TRAINING PLATFORM > ORIGINAL APOLLO 11 GUIDANCE COMPUTER SOURCE CODE FOR COMMAND AND LUNAR MODULES> OPENAI AI INCIDENT: UNSECURED SANDBOX LEADS TO CYBER-ATTACK ON HUGGING FACE > ENHANCING SOC EFFECTIVENESS THROUGH MULTI-LAYERED NETWORK DETECTION STRATEGIES > OVERPAID: REEVALUATING EXECUTIVE LEADERSHIP AND STRATEGIC HIRING PRACTICES > GLOW AI LAUNCHES WITH $1.2B VALUATION TO REVOLUTIONIZE ENDPOINT SECURITY IN THE AI ERA > SYNTHESIA INTRODUCES AI-POWERED LIVE COACHING FOR ENTERPRISE TRAINING > LAW ENFORCEMENT DISRUPTS KRATOS PHISHING KIT TARGETING MICROSOFT 365 AUTHENTICATION > TROJANIZED NEWTONSOFT.JSON FORK EXPLOITS GAME-RIGGING VULNERABILITY IN NUGET PACKAGE > READKINETIC: A FREE, LOCAL-FIRST SPEED READER FOR PERSONAL BOOKS > OPENAIM: A TECHNICAL FPS AIM TRAINING PLATFORM > ORIGINAL APOLLO 11 GUIDANCE COMPUTER SOURCE CODE FOR COMMAND AND LUNAR MODULES