analiza aiqbench

This vulnerability demonstrates a critical "confused deputy" attack vector where indirect prompt injection via hidden HTML comments allows AI coding agents to bypass access controls and exfiltrate data from projects the attacker cannot directly reach. By leveraging an official Microsoft MCP server, attackers can hijack privileged agent actions based on instructions invisible in standard UI views but present in API responses. This incident underscores emerging risks at the intersection of software development workflows and generative AI integration that require immediate attention for enterprise security teams.