Browsing Tag
MCP
9 posts
Model Context Protocol servers, integrations, and agent-tool connections.
Ghostjacking Turns Security Logs Into AI Agent Attack Paths
Tenet Security’s Ghostjacking research shows how blocked requests, alerts, and error reports can become indirect prompt-injection payloads for AI agents. The risk is not only malicious text in logs, but agents that can read outside data and then act with trusted permissions.
Tenable CyberAgents Exchange Turns Security Agents Into Shared Infrastructure
Tenable launched CyberAgents Exchange at Black Hat USA as a free, open-source registry for cybersecurity AI agents, skills, MCP servers, and playbooks. The useful idea is shared defense code; the hard part is proving each component is trustworthy enough to run inside real security operations.
X’s Hosted MCP Turns Social Search Into an AI Agent Tool
X has launched hosted MCP servers that let Claude, Cursor, Grok Build, VS Code, and other compatible AI tools call the X API and search X developer docs. The useful shift is not autonomous posting; it is lower-friction access to real-time social data, trends, bookmarks, and platform documentation inside agent workflows.
Gemini Spark on Mac Turns Desktop Files Into AI Agent Territory
Google is bringing Gemini Spark to the Gemini app for macOS in beta for U.S. Google AI Ultra subscribers. The update gives Spark permission-based access to local files, connected apps, real-time tracking, and soon remote task control from a phone.
Microsoft Defender Starts Watching Local AI Agents on Developer Machines
Microsoft Defender now discovers local AI agents and MCP server configurations across managed endpoints, while preview runtime protection can audit or block prompt-injection attempts in Claude Code and GitHub Copilot CLI before risky tool actions execute.
LiteLLM Exploit Puts AI Gateways on a June 22 Patch Deadline
CISA’s June 22 remediation deadline for CVE-2026-42271 puts LiteLLM AI gateways on the security team’s priority list. The flaw affects MCP test endpoints, can expose model-provider credentials, and may become unauthenticated RCE when chained with a Starlette host-header bypass.
AWS AgentCore Turns Enterprise AI Agents Into an Operations Stack
AWS used its New York Summit to expand Bedrock AgentCore, launch AWS Context and AWS Continuum, and push AI agents deeper into enterprise operations. The real story is not another chatbot layer, but a managed stack for grounding, governing, testing, and remediating agent behavior.
Microsoft AutoJack Research Shows How AI Browsing Agents Can Break Localhost Trust
Microsoft’s AutoJack research shows how an AI browsing agent could turn a malicious webpage into a local remote-code-execution path through AutoGen Studio’s MCP WebSocket surface. The specific issue was fixed before a PyPI release, but the localhost trust problem is bigger than one tool.
Grok Build Plugin Marketplace Makes Coding Agents a Toolchain Problem
xAI launched a built-in plugin marketplace for Grok Build, turning coding-agent setup into a packaged ecosystem of skills, commands, hooks, MCP servers, and language-server integrations.