June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)June 4, 2026
100 enterprise AI agents rated, plus an open source methodology you can use in procurement and security posture tracking.
Read more: AIRQ: AI Risk Quadrant — independent AI agent security rating (opens in new tab)
26 posts in MCP Security · Browse all posts
October 8, 2026
MCP security in October 2026: an MCP auth bypass in LiteLLM joins CISA's KEV list, Grafana MCP session spoofing, and malicious servers that pass five scanners.
September 7, 2026
September 2026 MCP security roundup: the Deadbugz supply chain campaign hides its payload until the third tool call, plus three new MCP server CVEs.
August 6, 2026
August 2026 MCP security roundup: the July 28 spec revision hardens authorization, a confused deputy hijacks Azure DevOps review agents, and scanners arrive.
July 6, 2026
July's security digest covers the critical MCP vulnerabilities, real-world MCP exploitation, NSA's official MCP hardening guidelines.
June 4, 2026
June 2026 in MCP security: Censys counted 12,520 Internet-accessible MCP services, most of them unauthenticated, and the measurements got a lot more concrete.
May 6, 2026
May 2026 in MCP security: a CVSS 9.8 flaw in NGINX integrations, an STDIO transport vulnerability exposing hundreds of thousands of servers, and the response.
April 6, 2026
Our April 2026 MCP resources digest highlights the latest vulnerability research and practical defenses.
March 5, 2026
March 2026 in MCP security: overthinking loops that drain API budgets, high-privilege RCE in Claude desktop extensions, and a widening MCP attack surface.
February 6, 2026
19 MCP security resources from February 2026: confirmed RCE in Anthropic's Git MCP server, the CoSAI framework, and supply chain risk across the MCP stack.
January 27, 2026
MCP puts a non-deterministic LLM at the center of security-critical decisions. The CoSAI white paper maps more than 40 MCP threats; here are the takeaways.
January 5, 2026
January 2026 in MCP security: as the protocol becomes the default way to connect agents to data and tools, the community pivots to its unique attack surface.
December 4, 2025
Latest MCP Security insights: attacks, threat models, defenses, and tools to protect AI agents and secure real-time model-tool interactions.
