Tag: confused deputy
2 articles
Windows Named Pipes Expose Security Risks
Don't assume that just because a Windows Named Pipe is local, it's private - in reality, it can be a security risk if not properly defended, exposing your system to privilege escalation and other threats. A cybersecurity expert warns that architects must redesign pipes to prioritize identity and access control.
Microsoft Azure DevOps Flaw Exposes AI Review Agents to Hidden Attacks
Imagine a hidden sentence that only AI sees, turning a reviewer's own AI agent into a vulnerability that lets attackers access projects they shouldn't - a chilling security flaw discovered in Microsoft Azure DevOps. This flaw, known as a confused-deputy vulnerability, was cleverly exploited in a proof of concept by Manifold Security.