Posts

GitGuardian MCP Governance Framework for Enterprise AI

GitGuardian publishes a practical MCP governance framework covering authentication standards, scope control, secrets lifecycle, and credential exposure detection for multi-agent deployments.

Exposed MCP Servers Triple to 1,467; Trend Micro Finds Cloud Command-Injection Flaws

Three independent scans in June 2026 show ~40% of remote MCP servers run without authentication, while Trend Micro found CVSS 9.8 command-injection flaws in unofficial cloud MCP implementations.

Meta AI Support Bot — Instagram Account Takeover via Prompt Injection

AIRQ Report — Only 11% of Production Agents Pass AI Security Bar

An independent assessment of 100 production AI agents finds only 11% pass basic security, with coding and computer-use agents carrying the highest risk.

Anthropic Opus 4.8 Browser Agent — 31.5% Pre-Safeguard Hijack Rate

Claroty Team82 — LLMs Discover Critical ICS Vulnerabilities Without Prior Disclosures

Claroty Team82 uses Claude Opus 4.6 to rediscover five critical ICS vulnerabilities on a Zenitel intercom platform without access to prior vulnerability details.

CVE-2026-27735 — MCP Reference Servers git_add Path Traversal

CVE-2026-27735 in MCP reference servers mcp-server-git allows path traversal via the git_add tool, staging files outside repository boundaries.

DesktopCommanderMCP SSRF (CVE-2026-10690) — MCP File Tool Exposes IMDS

Four Major AI Labs Use Incompatible Prompt-Injection Metrics

Anthropic, OpenAI, Google, and Meta each publish prompt-injection benchmarks in 2026, but no two labs measure the same threat — leaving buyers with no common baseline for model safety claims.

LibreChat CVE-2026-32625 — MCP URL Env-Var Interpolation Leaks Secrets

LibreChat ≤0.8.3 interpolates ${VAR} placeholders in user-supplied MCP server URLs against process.env, exfiltrating CREDS_KEY, JWT_SECRET, and MONGO_URI to attacker-controlled hosts.

Microsoft — Dependency Confusion npm Packages Profile Developer Environments

Microsoft uncovers 33 malicious npm packages using dependency confusion to deploy a reconnaissance payload that fingerprints developer environments for follow-on attacks.

arXiv — Trojan Backdoors in Agentic Workspaces Reach 95.5% ASR

New arXiv paper introduces ClawTrojan, a benchmark showing multi-step trojan injections in local agentic harnesses achieve 95.5% attack success on GPT-5.4, and proposes DASGuard as a dynamic defense.

IBM Langflow CVE-2026-7524 — Unauthenticated RCE via Symlink Archive Abuse

LibreChat MCP Credential Exfiltration (CVE-2026-44653/44654)

LibreChat ≤0.8.3 leaks decrypted MCP API keys and OAuth secrets to VIEW-only users; a paired auth bypass allows shared-agent editors to delete files globally.

Microsoft Build 2026 — Enterprise Agent Security with MDASH and Purview

Microsoft announces MDASH with 100+ specialized threat-hunting AI agents, agentic risk detection for Claude Code, Copilot, Codex, and OpenClaw via Purview, and agent identity through Entra managed service principals.

NousResearch hermes-agent CVE-2026-10548 — Improper Auth in Credential Pool Sync

A second credential-pool authentication bypass CVE hits NousResearch hermes-agent, this time in the Anthropic credential synchronization path.

Palo Alto Networks CVE-2026-0257 — Active Exploitation of GlobalProtect Auth Bypass

A PAN-OS GlobalProtect authentication bypass, initially rated medium, was escalated to critical after active exploitation. CISA added it to KEV.

Palo Alto Unit 42 — Red Hat npm Supply Chain Attack and Miasma Malware

A compromised Red Hat employee GitHub account delivered 32 trojanized @redhat-cloud-services npm packages with the Miasma payload, carrying valid SLSA provenance.

Permiseo — ChatGPhish Browser-Based Prompt Injection

Cisco AI Defense launches agent-security tooling suite

Cisco open-sourced MCP Scanner, Skill Scanner, DefenseClaw, and A2A Scanner to audit AI agent supply chains, MCP servers, and cross-agent communications.