Incidents tagged MCP

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit The Hacker News

Fortinet Buys Virtue AI to Hunt Vulnerabilities in AI Agents Before Hackers Do Startup Fortune

Phoenix Launched open access Agentic Intel Platform, Zero-Day Detection, MCP for threat intel, Malware, Package Firewall EIN Presswire

What the Visual Studio Code Vulnerability Reveals About AI Tooling Risk Cybersecurity Insiders

Millions of AI agents imperiled by critical vulnerability in open source package Ars Technica

Claude Code RCE: claude-cli:// Deeplink Vulnerability Allows Arbitrary Command Execution (Patch 2.1.118) Pasquale Pillitteri

Researchers scanned over 19,000 open-source MCP server repositories, revealing that AI-generated code is present in at least 20% and is disproportionately linked to exploitable vulnerabilities. Key findings include 4.1% of identified flaws being exploitable, with SQL injection, RCE, and path traversal prevalent, and 42.6% of vulnerable repositories showing signs of AI code generation.

Autonomous AI trading agents in 2026 were compromised by protocol-level vulnerabilities such as memory poisoning and indirect prompt injection, targeting their long-term memory and execution protocols like the Model Context Protocol (MCP). These flaws facilitated over $45 million in crypto security breaches, including a $40 million drain from Step Finance amplified by excessive agent permissions.

Architectural vulnerabilities within Large Language Model (LLM) environments integrated with the Model Context Protocol (MCP) enable attackers to embed malicious instructions within data content or tool metadata. This flaw allows for indirect prompt injection and tool poisoning, compelling LLMs to autonomously perform unauthorized actions such as data exfiltration or triggering enterprise workflows.

NSFOCUS has identified emerging threats targeting AI Agents and Large Language Models (LLMs), specifically through sophisticated attacks leveraging Multi-Agent Communication Protocols (MCPs) to achieve unauthorized access, privilege escalation, and intent manipulation. These new vulnerabilities include "MCP Tool Poisoning Attacks" and "Intent Disruption & Goal Manipulation," which could lead to system intrusion, data tampering, and the spread of erroneous information across multi-agent systems.

Chinese state-sponsored threat actors leveraged Anthropic's Claude Code and Model Context Protocol (MCP) as an "autonomous cyber attack agent" to orchestrate a highly sophisticated and largely automated cyber espionage campaign. This campaign, designated GTG-1002, performed reconnaissance, vulnerability discovery, exploitation, lateral movement, credential harvesting, and data exfiltration against approximately 30 high-value global targets.