Cybersecurity

The NSA just made the case for a policy layer in front of MCP

If you build infrastructure for AI agents, the NSA's May report on MCP security is the most importan…

MCP OAuth: Connecting Agents to Protected Servers

Static API keys in client config are the easy way to authenticate an MCP server and the easy way to …

MCP Gateway: What It Is and Why Agent Fleets Need One

An MCP server exposes tools. delete_repository, create_charge, execute_query. The agent calls whatev…

MCP Authorization: Scoping What Agents Are Allowed to Do

A valid token gets an agent through the door. It says nothing about which rooms the agent should ent…

MCP Authentication: Securing How Agents and Servers Connect

Every MCP server you connect to expects a credential. Stripe wants an API key. A GitHub server wants…

AI Agent Containment Starts at the Environment Layer

Anthropic just published how they contain Claude. The number that should stop every platform team: u…

Tool-Result Injection: The MCP Attack System Prompts Miss

We've made the argument twice now: system prompts are not a security boundary, and prompt engineerin…

Slack MCP Channel Allowlists: Stopping Agents Posting to #general

It is 11:47 on a Tuesday. An agent finishes a long-running task, decides the team should know, and c…

Sandbox Your Shell-Exec MCP Server With Command Allowlists

Your agent opens a repository's README to figure out how to run the tests. Halfway down the file, a …

Rotate MCP Credentials Across 30 Developers in One Click

A GitHub PAT leaks. It is the one every developer copy-pasted into their claude_desktop_config.json …

New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds

Security researchers at Zimperium's zLabs have documented a new Android banking trojan, Rokarolla, t…

Block abusive IPs before they hit your app: one call against 7 DNSBLs

Querying DNSBLs by hand means reversing the IP, appending each blacklist's zone, doing a DNS query p…