MarketsMCP Ecosystem 1412 Servers 38.7% Zero AuthenticationBloomberry·high signalXBlueskyLinkedInCopy link232% growth from 425 to 1412 servers. 50% have no public API — MCP is first machine interface. 38.7% no auth, 22.9% open CORS, 2.4% rate limiting.SourceSource pageBloomberry↳ Follow the threadPolicy dependency / Threat patternmcp-airlock is a stateless governance proxy that sits in front of MCP servers with policy, dry-run and human confirmationGitHubStack layer / Threat patternThree new advisories land on the most-used community GitLab MCP server, including a five-way bypass of its read-only mode and project allow-listGitHub Advisory DatabaseStack layer / Threat patternCline Leaves the IDE: a Standalone Desktop Agent That Imports Claude Code and Codex Sessions and Schedules Recurring PR ReviewsCline GitHub releases (launch reported by RuntimeWire, version cadence verified on the repo)Policy dependency / Stack layer'Do this as quickly as possible' repeatedly got a Claude session flagged by a corporate security directorr/ClaudeAIStack layer / ContrastThe Internet Archive is now rate-limiting the Wayback Machine against high-volume automated trafficInternet Archive Blog (572 points on Hacker News)Stack layer / ContrastOPEN-1B Claims Bitwise-Reproducible Training Across Heterogeneous Commodity HardwarearXiv 2609.17380Stack layer / ContrastTypeSafe AI ships Jev, a model that returns typed probabilistic values instead of text, at $0.042 per million input tokens and free outputTypeSafe AIThreat pattern / Contrast51.1% of Multi-Version MCP Servers Changed What They Advertise, and 4.2% Repointed Their Endpoint to a Different Host Without Telling ClientsarXiv 2609.14119