
Unpinned MCP server launches can expose API keys, Corelight finds
Of 35 servers reviewed, 23 recommended installs pulled fresh registry dependencies; pinning the main package did not lock the rest.
3 stories, newest first · one card per story

Of 35 servers reviewed, 23 recommended installs pulled fresh registry dependencies; pinning the main package did not lock the rest.

The partner piece says shallow connection metadata can stall analysts even when detections fire.

Corelight argues agentic AI should replace SOC alert queues with hypothesis-driven, machine-run investigations, reserving humans for judgment.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views