MCP's STDIO Flaw Puts 200K AI Servers at Risk
Ox Security found that MCP's STDIO transport executes arbitrary OS commands before validating the server, exposing 200K+ instances across every major AI coding tool.
Articles Tagged "MCP"
Shopify AI Toolkit Lets Claude Code Run Your Store
Shopify's free, MIT-licensed AI Toolkit connects Claude Code, Cursor, and Gemini CLI directly to live store data, giving agents real-time access to API schemas, documentation, and store execution.
Anthropic Launches Managed Agents - Runs Your AI for You
Anthropic released Claude Managed Agents in public beta today, a fully managed platform that handles sandboxing, state, and tool execution so developers can skip building agent infrastructure from scratch.
Cloudflare Launches EmDash as Open-Source WordPress Rival
Cloudflare's EmDash is an MIT-licensed CMS built on Astro 6.0 that sandboxes plugins in isolated Workers, ships a built-in MCP server, and targets WordPress's 42.5% share of the web.
Cisco DefenseClaw Locks Down AI Agents at RSA
Cisco open-sourced DefenseClaw at RSA 2026 - a five-minute install that scans agent skills, MCP servers, and AI-generated code before they run, with 2-second policy enforcement and Splunk telemetry built in.
OpenAI Codex Launches Plugin Marketplace for Agents
OpenAI ships a plugin marketplace for Codex CLI v0.117.0, bundling skills, app integrations, and MCP server configs behind an enterprise governance layer.
MCP Server Ecosystem Leaderboard - Top Servers Ranked
Rankings of the most popular MCP servers across development, data, web automation, and productivity categories based on installs, search volume, and GitHub activity.
WordPress.com Opens Write Access to AI Agents via MCP
WordPress.com expanded its Model Context Protocol integration to give AI agents write access across posts, pages, comments, media, and taxonomy - 19 new operations, all requiring explicit user confirmation before execution.
Kraken Ships First Crypto CLI Built for AI Agents
Kraken launched an open-source Rust CLI with built-in MCP server that lets AI agents like Claude Code and Codex trade crypto, manage portfolios, and paper-trade against live markets.
ChatGPT Expands Into Commerce with 14 App Partners
OpenAI launches an Apps SDK and 14 third-party integrations for ChatGPT, turning the chatbot into a transactional platform for food delivery, travel, music, and design.
Microsoft Patches 84 Flaws - AI Found the Worst One
Microsoft's March 2026 Patch Tuesday fixes 84 vulnerabilities including a CVSS 9.8 RCE discovered by XBOW's autonomous AI agent, an Azure MCP Server SSRF, and an Excel XSS that hijacks Copilot to exfiltrate data.
RentAHuman Lets AI Agents Hire People for Physical Tasks
RentAHuman.ai is a marketplace where AI agents hire humans via MCP or REST API for real-world tasks, but 590,000 workers are chasing just 11,300 bounties and most gigs turn out to be startup marketing.
