Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-18 · source-backed
Token Security researcher Ariel Simon will demo a full attack chain at RSAC 2026 — from an RCE flaw in Microsoft's Azure MCP server to credential harvesting and complete Azure tenant compromise. The research extends beyond the patched CVE-2026-26118 by demonstrating post-exploit escalation paths the original advisory didn't surface. Yahoo Finance
Each link below shares sources, entities, or timing with this story.
Token Security researcher Ariel Simon will present at RSAC 2026 a vulnerability chain starting from SSRF in Microsoft's Azure MCP server (CVE-2026-26118, CVSS 8.8). The managed identity token included in outbound MCP requests is capturable without admin access, then escalatabl...
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
Token Security's RSAC 2026 presentation documents an RCE chain in Microsoft's Azure MCP server that compromises entire cloud environments. 38% of 500+ public MCP servers have no authentication. Every tool parameter is an untrusted injection surface. Source
CrowdStrike published the first formal taxonomy of agentic tool chain attacks, naming three distinct classes that every builder running MCP servers needs to internalize: tool poisoning (injecting malicious instructions into tool descriptions that the agent reads and follows),...
Two AI toolchain CVEs hit CISA's Known Exploited Vulnerabilities catalog this week, and the attack chain connecting them is the kind of thing that should change how you think about supply chain trust. CVE-2026-33017: Langflow, the popular agent workflow builder, has an unauthe...
Bitdefender published the most alarming MCP security metric to date: 53% of open-source MCP server implementations rely on insecure static credentials while only 8.5% use OAuth. The report identifies five risk categories: opt-in (not default) security, supply chain poisoning,...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.