Search: “mcp”

77 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 137 AI safety & security 118 Policy & legal 52 Exploit / PoC 51 Malware 34 AI tools & infra 31 Model release 22 Ransomware 20 Industry 19 Threat actor 18 Tools 16 Data breach 14 Phishing & fraud 13 AI industry 13

SeverityAll critical 173 high 80 medium 164 low 43 info 118

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

The Hacker NewsJul 11, 04:05 UTC · Jul 11, 2025Vulnerability CVE-2025-6514 CVE-2025-49596 CVE-2025-53110+1 CVEs

60

Critical Vulnerability in Anthropic's MCP Exposes Developer Machines to Remote Exploits

The Hacker NewsJul 4, 09:23 UTC · Jul 4, 2025Vulnerability CVE-2025-49596

60

Anthropic MCP Inspector: CVE-2025

Recorded FutureOct 14, 00:00 UTC · Oct 14, 2025Vulnerability in the wildCVE-2025-49596

60

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

The Hacker NewsApr 22, 05:41 UTC · Apr 22, 2026Vulnerability CVE-2025-65720 CVE-2026-30623 CVE-2026-30624+12 CVEs1

60

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval

The Hacker NewsAug 5, 13:04 UTC · Aug 5, 2025Vulnerability CVE-2025-541361

60

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross

The Hacker NewsAug 5, 14:27 UTC · Aug 5, 2026Vulnerability in the wildCVE-2026-58073 CVE-2026-58072 CVE-2026-58067+10 CVEs1

60

Systemic Flaw in MCP Protocol Could Expose 150 Million Downloads

Infosecurity MagazineApr 16, 09:40 UTC · Apr 16, 2026Vulnerability

55

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032 CVE-2026-27944 CVE-2026-27825+1 CVEs

60

Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata

The Hacker NewsFeb 3, 16:41 UTC · Feb 3, 2026Vulnerability1

55

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

The Hacker NewsJul 29, 15:39 UTC · Jul 29, 2026Vulnerability CVE-2026-597261

60

New Zero-Click Flaw in Claude Extensions, Anthropic Declines Fix

Infosecurity MagazineFeb 9, 17:30 UTC · Feb 9, 2026Vulnerability

55

How Pentera Turns AI Security Workflows into Validation Engines

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability

55

Microsoft Patch Tuesday for March 2026 — Snort rules and prominent vulnerabilities

Cisco TalosMar 10, 22:23 UTC · Mar 10, 2026Vulnerability CVE-2026-26110 CVE-2026-26113 CVE-2026-26144+14 CVEs

60

Cisco enhances security for enterprise AI adoption

Help Net SecurityFeb 11, 00:00 UTC · Feb 11, 2026Vulnerability

55

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams

Help Net SecurityMay 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-4670 CVE-2026-5174+4 CVEs

60

XM Cyber advances AI security with enhanced exposure and attack path visibility

Help Net SecurityMar 25, 09:46 UTC · Mar 25, 2026Vulnerability

55

Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero

The Hacker NewsMar 11, 09:15 UTC · Mar 11, 2026Vulnerability CVE-2026-26127 CVE-2026-21262 CVE-2026-21536+3 CVEs

60

DockerDash Exposes AI Supply Chain Weakness In Docker's Ask Gordon

Infosecurity MagazineFeb 3, 15:15 UTC · Feb 3, 2026Vulnerability1

55

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability CVE-2024-50050 CVE-2025-30165 CVE-2025-23254+1 CVEs

60

Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

The Hacker NewsJun 12, 12:04 UTC · Jun 12, 2026Vulnerability1

55

Digimarc adds provenance, audit, and verification controls for AI agent workflows

Help Net SecurityMay 28, 00:00 UTC · May 28, 2026Vulnerability

55

Cisco builds security framework for safe enterprise adoption of AI agents

Help Net SecurityMar 24, 00:00 UTC · Mar 24, 2026Vulnerability

55

Virtue AI AgentSuite enables enterprises to test and secure AI agents

Help Net SecurityJan 29, 00:00 UTC · Jan 29, 2026Vulnerability

55

Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or Uyghurs

The Hacker NewsNov 24, 11:08 UTC · Nov 24, 2025Vulnerability

55

Red Hat Enterprise Linux adds post-quantum security and AI-driven automation in latest releases

Help Net SecurityMay 7, 00:00 UTC · May 7, 2026Vulnerability

55

Proofpoint addresses AI threats with intent-based security

Help Net SecurityMar 25, 09:42 UTC · Mar 25, 2026Vulnerability

55

ContextCrush Flaw Exposes AI Development Tools to Attacks

Infosecurity MagazineMar 5, 14:00 UTC · Mar 5, 2026Vulnerability1

55

Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133 CVE-2024-55556

60

The hidden risks of LLM autonomy

Help Net SecurityJun 4, 00:00 UTC · Jun 4, 2025Vulnerability

55

Traefik Labs introduces Distro Zero secure runtime for API and AI gateways

Help Net SecurityJul 31, 00:00 UTC · Jul 31, 2026Vulnerability

55

The Kill Chain Is Obsolete When Your AI Agent Is the Threat

The Hacker NewsJul 9, 15:37 UTC · Jul 9, 2026Vulnerability

55

NetSPI pairs AI pentesting with expert-validated security findings

Help Net SecurityJul 9, 00:00 UTC · Jul 9, 2026Vulnerability

55

Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast

Help Net SecurityJun 7, 00:00 UTC · Jun 7, 2026Vulnerability in the wildCVE-2026-0257 CVE-2026-41089 CVE-2025-48595+1 CVEs

60

When Identity is the Attack Path

The Hacker NewsMay 21, 10:30 UTC · May 21, 2026Vulnerability

55

NetSPI AI-powered Continuous Pentesting identifies high-impact vulnerabilities

Help Net SecurityMay 13, 00:00 UTC · May 13, 2026Vulnerability

55

Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data

The Hacker NewsApr 16, 15:50 UTC · Apr 16, 2026Vulnerability CVE-2025-591451

60

CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access

Security AffairsApr 15, 18:17 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032

60

Virtue AI brings continuous stress testing to enterprise AI agents

Help Net SecurityApr 15, 10:01 UTC · Apr 15, 2026Vulnerability

55

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

The Hacker NewsApr 7, 05:56 UTC · Apr 7, 2026Vulnerability in the wildCVE-2025-59528 CVE-2025-8943 CVE-2025-26319

60

Untrusted repositories turn Claude code into an attack vector

Security AffairsFeb 25, 21:39 UTC · Feb 25, 2026Vulnerability CVE-2025-59536 CVE-2026-21852

60