Policy dependency / Stack layer
Kastra Launches Policy Enforcement for Claude Code, Cursor, and Codex
Hacker News
Stack layer / Threat pattern
Bind every MCP token to the exact tool subset it may invoke, and check scope before the handler body runs
Digital Applied
Stack layer / Threat pattern
NSA issues official MCP hardening guidance after Amazon Q auto-execution CVEs (CVSS 8.5) enable AWS credential theft
Wiz
Stack layer / Threat pattern
From Prompts to Contracts: Moving Deterministic Agent Behavior Out of Prompts and Into Code
arXiv
Stack layer / Threat pattern
TRACE Watermarks Agent Trajectories Against Adversaries Who Control the Logs
arXiv
Stack layer / Threat pattern
Meniga Launches 'Fini,' an MCP Server Bringing Agentic AI Into Banks
Finovate
Stack layer / Threat pattern
HeirWealth ships an MCP server so advisers can query consolidated wealth data conversationally
Finextra
Stack layer / Threat pattern
Snyk's Evo Agentic Development Security Hit GA June 29 — an Enforcement Layer That Polices MCP Servers and Coding Agents at Runtime
SiliconANGLE