AINewsnow

One year of MCP security: nine in ten public servers have no auth, and the worst bug is from 1988

This story is from 2026-09-27. It is preserved in the archive; the latest stories are on the live feed.

The Model Context Protocol went from a November 2024 announcement to the default way AI agents reach tools, files and APIs. Within eighteen months it also became the most thoroughly attacked piece of AI infrastructure in existence — not because the protocol invented new bugs, but because it wired a…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-27 10:28 · DEV Community — AI
    One year of MCP security: nine in ten public servers have no auth, and the worst bug is from 1988

More stories

  1. Google DeepMind launches Gemini Robotics 2.5, reports 96% success in Mercedes-Benz factory test — Google DeepMind Blog
  2. Nvidia faces shareholder suit and internal probe over CEO's ties to alleged Chinese spy — CSET Georgetown
  3. Anthropic IPO said to be multiple times oversubscribed as it targets $1.4 trillion valuation — CNBC Technology
  4. Nvidia spy scandal exposes Singapore networks channeling AI chips to China — New York Times AI
  5. OpenAI's Quarterly Revenue Rises to $10 Billion as Losses Widen — The Information AI
  6. OpenAI launches Businesses in ChatGPT beta with verified profiles and Business Agents — OpenAI News
  7. CoreWeave beats Q3 revenue estimates, rules out new unsecured debt through 2027 — The Globe and Mail
  8. Claude Code security flaw exposes API keys as developers juggle multiple coding agents — VentureBeat AI

Get the daily brief of stories like this at 6:30 every morning →