Microsoft’s agentic HTML can leak passwords and AI keys, researcher finds

A researcher has found a major vulnerability in NLWeb, Microsoft’s underlying protocol for letting AI agents talk to websites.