Fetching from the wire…
01
02
03
04
05
06
07
08
Top 5 · 2026-02-22 · source-backed
Bitdefender published the most alarming MCP security metric to date: 53% of open-source MCP server implementations rely on insecure static credentials while only 8.5% use OAuth. The report identifies five risk categories: opt-in (not default) security, supply chain poisoning, over-permissioned tokens/confused deputy, injection attacks, and absent audit logging. Two specific CVEs cited: CVE-2025-6514 (CVSS 9.6 RCE in mcp-remote) and CVE-2025-32711 ("EchoLeak" silent data exfiltration via Microsoft 365 Copilot). Builder takeaway: Audit your MCP servers TODAY. Replace static credentials with OAuth. Bitdefender
Each link below shares sources, entities, or timing with this story.
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
The agent skills supply chain is under coordinated attack. Snyk's ToxicSkills audit found 36% of ClawHub's 3,984 skills contain prompt injection payloads, 13.4% have critical malware, and submission rates exploded 10x to 500+/day. This week alone: CVE-2026-2256 (CVSS 9.1) is a...
Astrix analysis of 5,000+ open-source MCP servers: 53% rely on static API keys, only 8.5% implement OAuth. The MCP spec now supports OAuth 2.1 with PKCE and .well-known/oauth-protected-resource discovery. Five risk domains: authentication gaps, supply chain weaponization, priv...
OX Security disclosed a systemic vulnerability on June 16 in core Model Context Protocol implementations that enables arbitrary command execution, exposing API keys, internal databases, and chat histories on any vulnerable MCP host. This isn't one bad server. It's a protocol-l...
GitHub added allowedMcpServers and deniedMcpServers keys to enterprise Copilot managed settings on August 6, configured to fail closed on malformed config, then followed on August 7 with a usage API exposing totals_by_3rd_party_agent for per-agent spend attribution (digitalapp...
The most comprehensive MCP security analysis published this week. Five risk categories, two named CVEs, and the devastating 53%/8.5% static-credentials-to-OAuth ratio. Required reading for anyone deploying MCP servers. Bitdefender ---
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.