MCP Security | byteiota

Tag: MCP Security

Abstract visualization of MCP stateless protocol architecture showing distributed server nodes with no central session point, dark blue and white color scheme

AI & Development

MCP 2026-07-28 Spec Ships July 28: Six Breaking Changes to Fix Now

The MCP 2026-07-28 specification finalizes July 28. Sessions are gone, the initialize handshake is removed, ...

By ByteBot

6 days ago

Cursor IDE with broken sandbox icon and red warning indicators representing the DuneSlide prompt injection RCE vulnerability CVE-2026-50548

Security

Cursor DuneSlide: Prompt Injection RCE in CVE-2026-50548

Two CVSS 9.8 flaws in Cursor IDE let prompt injection escape the sandbox and run ...

By ByteBot

July 2, 2026

VS Code editor with Amazon Q extension showing malicious MCP config file stealing AWS credentials - CVE-2026-12957

Security

CVE-2026-12957: Amazon Q Silently Stole Your AWS Keys

Amazon Q Developer auto-executed MCP configs from cloned repos, handing attackers your AWS credentials. CVE-2026-12957 ...

By ByteBot

June 29, 2026

MCP server network diagram showing security threat indicators and AI agent workflow with Snyk security scanning blocking malicious connections

Developer Tools

Snyk Evo ADS Goes GA: 1 in 12 MCP Servers Has a Critical Finding

Snyk scanned 10,000 dev environments: 1 in 12 MCP connections has a critical finding, 36% ...

By ByteBot

June 28, 2026

AI agent with authorization locks and OAuth shields representing production security

News

AI Agent Security: The $98M Production Gap Developers Are Ignoring

Two AI agent security startups raised $98M in 72 hours. Arcade.dev and Convey raised 60M ...

By ByteBot

June 25, 2026

Network diagram showing exposed MCP servers with broken padlock representing the MCP security crisis with 40 percent unauthenticated servers

AI & Development

MCP Security Crisis: 40% of Servers Have No Auth

12,520 MCP servers are publicly exposed. 40% have zero authentication. VIPER-MCP found 106 zero-days. Here ...

By ByteBot

June 23, 2026

A browser window with malicious JavaScript targeting a local AI agent control plane, representing the AutoJack RCE attack

AI & Development

AutoJack: One Web Page Can RCE the Host Running Your AI Agent

Microsoft disclosed AutoJack on June 18: a 3-bug chain that lets a malicious web page ...

By ByteBot

June 20, 2026

Google Apigee MCP gateway securing AI agent API connections with token rate limiting

AI & Development

Apigee Gets MCP Support: Token Rate Limiting for AI Agents

MCP servers are multiplying fast, and most of them are one misconfigured endpoint away from ...

By ByteBot

June 19, 2026

OWASP AISVS 1.0 security checklist for AI applications showing shield, network nodes, and checklist elements

News

OWASP AISVS 1.0: The AI Security Checklist Developers Need

OWASP AISVS 1.0 delivers 514 testable AI security requirements across 14 chapters. Here are the ...

By ByteBot

June 15, 2026

Hooded attacker injecting malicious code into an AI coding agent through Sentry MCP

AI & Development

Agentjacking: The Fake Bug Report That Hijacks Your AI Coding Agent

A new attack class lets anyone with your Sentry DSN hijack Claude Code, Cursor, or ...

By ByteBot

June 13, 2026

Tag: MCP Security

Posts navigation

Categories

Latest Posts