A reported flaw in Microsoft’s Azure DevOps MCP server shows how a single hidden PR comment can steer an AI review agent into places it was not meant to go.
A claimed sale of source code and Azure DevOps credentials is a reminder that in modern software teams, access material can matter more than the files themselves.
A victim listing tied to Aurora underscores how ransomware extortion can turn source code, database passwords, and CI/CD artifacts into the real prize.