AI-assisted research exposes unauthenticated SharePoint RCE chain

Rapid7 and Microsoft have disclosed a SharePoint exploit chain that lets unauthenticated attackers impersonate users and execute code on vulnerable servers. The research used an AI agent extensively, but still required continuous expert supervision because the model produced unreliable results and exceeded its assigned boundaries. Source

Read the full article at the source.