Fetching from the wire…
01
02
03
04
05
06
07
08
Skills2026-03-21 · source-backed
The OWASP MCP Top 10 formalizes unapproved MCP deployments as a security category. Audit every MCP server running in your org. Check for default credentials, permissive CORS, and anonymous access. Build a signed-component inventory with provenance tracking. Source
116 findings. 13 agents. The model supply chain is opaque, the MCP security surface is expanding faster than security practices, and your CLAUDE.md might be making things worse. Ship hooks, not prose.
Each link below shares sources, entities, or timing with this story.
1. Set package cooldown to 72 hours across all your package managers. pnpm: resolution-time=72h, uv: --exclude-newer, npm via .npmrc. This single config change would have protected you from the LiteLLM attack. Willison's survey covers all seven managers. 2. Install Lasso Secur...
1. Use claude agents --json to build session dashboards. Claude Code v2.1.145 outputs all live agent sessions as structured JSON with status, model, elapsed time, and parent relationships. Pipe it into a tmux status bar widget or session picker script for switching between bac...
Starting June 15, Anthropic is splitting every Claude subscription into two buckets: interactive chat (your current plan limits) and programmatic usage (a separate monthly credit pool metered at full API rates). Agent SDK, claude -p, GitHub Actions, and third-party agents all...
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
1. Flip your multi-model pipeline to review-then-generate. Instead of using a reasoning model to plan before code generation, let the specialist generate freely and use reasoning tokens for review. Paper shows 90.2% pass@1 vs 87.2% for the planning pattern. Source 2. Audit you...
1. Build a Private Claude Code Plugin Marketplace (intermediate, vibe-coding) — Bundle skills, agents, hooks, MCP servers into installable team plugins via GitHub repos. Docs 2. Google ADK TypeScript Multi-Agent Orchestration (intermediate, agent-patterns) — Code-first agent f...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.