Azure DevOps MCP: A New Injection Vector in AI Reviewer Agents
A flaw in the Azure DevOps MCP (Model Context Protocol) integration allows an invisible comment in a pull request to hijack an LLM agent tasked with reviewing it.
Jul 23, 2026 7 2
Hugging Face breach: when an autonomous AI agent serves as a swarm-scale intrusion tool
On July 20, 2026, Hugging Face revealed a breach in its production infrastructure. The entry was made through a malicious dataset, but the most disturbing aspect is elsewhere: the post-intrusion operations were carried out by an "autonomous agent framework" executing thousands of actions across a swarm of ephemeral sandboxes.
Jul 20, 2026 23 3
GPT-5.6 Sun wipes out production: one year after Replit, the coding vibe falls into the same hole
An AI coding that executes `rm -rf` on the production database, this wasn't supposed to happen again after the Replit fiasco. It just happened again, several times, with GPT-5.6 Sol.
Jul 17, 2026 10 2