A vulnerability in Microsoft Azure DevOps allows attackers to embed hidden commands in pull request comments that can manipulate AI review agents into approving malicious code or executing unintended actions. Organizations using AI-powered code review too
A vulnerability in Microsoft Azure DevOps allows attackers to embed hidden commands in pull request comments that can manipulate AI review agents into approving malicious code or executing unintended actions. Organizations using AI-powered code review too
Read the full article: https://thehackernews.com/2026/07/microsoft-azure-devops-mcp-flaw-lets.html
Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.
Test Your Site Now — It's Free