Count your MCP servers before you secure them
An arXiv study submitted on 21 May identified 7,973 live remote MCP servers and found that 40.55% expose tools without authentication; it also tested…
Category: Tips
Check your MCP Python SDK version
Cycode reported an OAuth account-takeover flaw in the official MCP Python SDK, fixed in versions 1.30.0 and 2.2.0. No CVE had been assigned as…
Start with the boring credentials
A community dataset from NHIMG covering 250 breaches says 114 of them, 46%, began with a leaked, stolen or weak credential. It fits neatly…