ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “oauth”

2 stories in the last 24h

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllPhishing & fraud 2Threat actor 2AI safety & security 1Data breach 1Industry 1Vulnerability 1
SeverityAllcritical 0high 3medium 3low 0info 2

Characterizing Network Centralization and Observability in the Remote MCP Ecosystem

A measurement study of 179 remote MCP servers finds heavy infrastructure concentration (HHI 0.736) and a security-observability tradeoff in platform OAuth.

The paper introduces a three-tier observability framework (catalog metadata, passive compliance signals, live vulnerability analysis) applied to a stratified sample of 179 remote Model Context Protocol (MCP) endpoints from two public registries. The Herfindahl-Hirschman Index over ASN distribution is 0.736, well above the 0.25 high-concentration threshold, and 95% of commercial PaaS-hosted servers enforce gateway-level OAuth 2.1 with PKCE. Authentication correlates strongly with hosting platform choice rather than operator configuration, creating a security-observability tradeoff that constrains automated scanning for tool-poisoning vectors without prior credentials.

arXiv cs.CR · 17h agoAI safety & security

Webinar: What happens in the first hours of a Google Workspace breach

BleepingComputer and Material Security will host a September 23 webinar analyzing first-hours response decisions in real Google Workspace breaches.

The September 23, 2026 webinar 'Breach autopsy' features Material Security VP of Security Rajan Kapoor and Fireside Consulting president Rick Fitzgerald examining publicly documented Google Workspace breaches. Two analyzed attacks combined social engineering with malicious OAuth applications to gain access. Sessions will cover scoping exposed users and data, confirming whether attacker access persists, and which early containment decisions limited or worsened impact for lean security teams.

BleepingComputer · 23h agoIndustry