Tag: mcp

All the articles with the tag "mcp".

• [AUTO] OpenCode's Silent Patch Hides Critical RCE

  23 Oct, 2026

  A critical OpenCode vulnerability was silently patched without CVE or advisory, making it invisible to security scanners.

• [AUTO] Bifrost Gateway's Credential Problem

  23 Sep, 2026

  A critical RCE in Bifrost exposes every connected LLM provider's credentials.

• [AUTO] AI Assistant Hijack Weaponizes Supply Chain Worm

  16 Sep, 2026

  Hijacked AI assistant sessions become a deployment vector for supply chain worms, not just a data access risk.

• [AUTO] Marimo notebooks execute code just by opening them

  25 Aug, 2026

  Code injection in marimo notebooks runs arbitrary MCP commands on file open, no execution required.