Skip To Main Content
project Timestamp on Muck Rack

project Timestamp

As seen in: Microsoft Learn Blog, DEV Community, Towards Data Science, SQL Server Central, Cyber Security News, Blog El Hacker, Malware.News, VPNCentral, CyberNoz, unSafe. and
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with project

Contact project, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Microsoft Defender XDR Queries Can Miss Public Connections Logged as FourToSixMapping

|
By Device NetworkEvents, Where RemoteIptype, project Timestamp
| VPNCentral
Microsoft Defender XDR detection rules can miss public network connections when they filter the DeviceNetworkEvents table only for RemoteIPType == "Public". Some IPv4 connections made through IPv6-capable sockets appear under the separate FourToSixMapping classification. The connection events remain available in Defender XDR.
Open in Who Shared Issue with article?

How a single page can RCE the host running your AI agent

|
By Device ProcessEvents, project Timestamp, Process CommandLine
| unSafe.
Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a browsing agent to reach a local Model Context Protocol (MCP) WebSocket and spawn arbitrary processes on the host. The technique, which we call AutoJack, jacks the agent into becoming the attacker’s last-mile delivery vehicle by crossing the localhost trust boundary that many developer tools rely on.
Open in Who Shared View Duplicates (5) Issue with article?

Inside the Mastra npm supply chain compromise

|
By Device ProcessEvents, Where FileName, project Timestamp
| unSafe.
From package to postinstall payload: Inside the Mastra npm supply chain compromise Microsoft Threat Intelligence observed a large-scale npm supply chain attack affecting 140+ pac 2026-6-18 03:43:4 Author: www.microsoft.com(查看原文) 阅读量:0 收藏 Microsoft Threat Intelligence observed a large-scale npm supply chain attack affecting 140+ packages across the mastra and @mastra scopes on the npm registry.
Open in Who Shared View Duplicates (5) Issue with article?
See all 56 articles