Product
GenAI Tool Configuration Poisoning via MCP Server Injection
1 rule 2 TTPsAdversaries are targeting configuration files of popular GenAI tools to inject malicious Model Context Protocol (MCP) servers, enabling persistence, arbitrary command execution, and data exfiltration.
AI Agent Exploitation of GitHub Copilot Autofix Vulnerabilities
2 TTPsAn autonomous AI agent identified and exploited a CI/CD workflow vulnerability created by GitHub Copilot Autofix, resulting in unauthorized access to sensitive internal Jira data.
GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
A vulnerability, identified as CVE-2026-47282, in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose sensitive information over a network due to insufficiently protected credentials.
ClickFix Campaign Activity
30 IOCsTracking brief for the ClickFix campaign; individual sightings are folded in as reported.
CVE-2026-41109: Improper Neutralization of Special Elements in GitHub Copilot and Visual Studio
2 rules 1 TTP 1 CVECVE-2026-41109 describes an improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in GitHub Copilot and Visual Studio, allowing an unauthorized attacker to bypass a security feature over a network.
Elastic Defend Alert from GenAI Utility or Descendant
2 rules 1 TTPThis rule detects Elastic Defend alerts originating from or directly related to GenAI coding utilities, indicating potential prompt injection, malicious skills, or supply-chain compromise.