Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-15 · source-backed
XBOW — a fully autonomous AI pentesting agent that has ranked at or near the top of HackerOne's leaderboard for over a year — is publicly credited with finding CVE-2026-21536, a CVSS 9.8 RCE in Microsoft's Devices Pricing Program cloud service. First time an autonomous agent gets a critical CVE credit at a major vendor. The Hacker News
Each link below shares sources, entities, or timing with this story.
Microsoft supports MCP / Shared entities / Same source domain / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, Microsoft, The Hacker News; reported by the same outlet (thehackernews.com).
Microsoft supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVSS, Microsoft, RCE; overlapping topics (agent, critical, microsoft).
Microsoft criticizes Semantic Kernel / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft criticizes Semantic Kernel); both cover CVE, CVSS, Microsoft, RCE; overlapping topics (agent, microsoft).
Anthropic partners with Microsoft / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Anthropic partners with Microsoft); both cover CVE, CVSS, The Hacker News; reported by the same outlet (thehackernews.com).
Microsoft supports MCP / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVSS, Microsoft; reported by the same outlet (thehackernews.com).
Microsoft released Azure / Shared entities / What happened next / Tension
Linked by a graph relationship (Microsoft released Azure); both cover CVE, CVSS, Microsoft, RCE; picks up the CVE thread on 2026-03-23.
Microsoft released OpenClaw / Shared entities / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (Microsoft released OpenClaw); both cover CVSS, RCE, The Hacker News; reported by the same outlet (thehackernews.com).
Microsoft supports MCP / Shared entities / Earlier coverage
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVSS, Microsoft, RCE; earlier CVE coverage from 2026-02-22.