Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-30 · source-backed
CVE-2026-81835 hits fetch_instructions via a malicious MCP server in versions through 3.51.1. The exploit is public. GitHub's advisory GHSA-q2jq-8pm2-fj8h rates it low, NVD scores it 5.5 MEDIUM. (NVD) If your upgrade gating reads GHSA severity only, this one slips through.
Each link below shares sources, entities, or timing with this story.
The Model Context Protocol has a security problem that's no longer theoretical — it's statistical. Between January and February 2026, researchers filed 30+ CVEs against MCP servers, clients, and infrastructure. One package with nearly 500,000 downloads carried a CVSS 9.6 RCE....
Check Point Research disclosed CVE-2025-59536 and CVE-2026-21852 — two vulnerabilities that weaponize Claude Code's project configuration system against its users. This matters because an Agents Anonymous survey this week showed 90% of practitioners at their SF meetup use Clau...
Three separate Anthropic changes over about two weeks point the same direction, and none of them announced themselves as a strategy. Claude Code 2.1.238 added claude self-hosted-runner --defer-shutdown-max-min, which keeps serving attached sessions on SIGTERM, parks whatever's...
akitaonrails/ai-memory (1,537 stars, +41 today, Rust) released v1.27.0 today with signed binaries for all three platforms, pitching quit-in-Claude-Code-resume-in-Codex without re-explaining architecture (GitHub). The support matrix is the real artifact. Codex and Antigravity C...
1. Build a Private Claude Code Plugin Marketplace (intermediate, vibe-coding) — Bundle skills, agents, hooks, MCP servers into installable team plugins via GitHub repos. Docs 2. Google ADK TypeScript Multi-Agent Orchestration (intermediate, agent-patterns) — Code-first agent f...
Anthropic invented a file convention. It's now shipping GA inside a competitor's product. Nobody wrote a spec, nobody held a standards meeting, it just happened. On July 29, GitHub made agent skills and MCP server support generally available in Copilot code review for all Pro,...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.