New AI Security Flaw Lets Hackers Take Over Your Computer
Microsoft researchers discovered a vulnerability called AutoJack that lets attackers execute arbitrary code on the host system running certain AI agents when a user simply visits a malicious web page.

Microsoft researchers revealed AutoJack, a security flaw that allows hackers to execute malicious code on a computer running specific AI agents. The vulnerability is triggered when a user visits a specially crafted web page, giving attackers full control of the host system. In plain English, this means your computer could be compromised just by visiting the wrong website while using certain AI tools.
This is a significant risk for anyone using AI agents on their personal or work devices. Unlike traditional malware, AutoJack doesn't require users to download anything—just visiting a malicious page can be enough to compromise your system. This highlights the growing need for robust security measures in AI applications, especially as they become more integrated into daily tasks.
If you use AI agents on your computer, check if they are affected by AutoJack. Microsoft has provided a list of vulnerable tools on their security blog. Update your software immediately and avoid visiting untrusted websites while using AI agents. For more details, visit the Microsoft Security Blog.