AI-assisted research exposes unauthenticated SharePoint RCE chain

Rapid7 and Microsoft have disclosed a SharePoint exploit chain that lets unauthenticated attackers impersonate users and execute code on vulnerable servers. The research used an AI agent extensively, but still required continuous expert supervision because th…