A Small Detail in the MCP OAuth Fix
The Python SDK update caught my attention because finishing the fix takes a little more than changing a version number.
notebook / tag
#mcp
3 entries with this tag.
Telemetry Is an Instruction Channel
GhostJacking shows how attacker-controlled text can cross from WAF events, logs, and error reports into privileged agent actions. The missing control is provenance from evidence to side effect.
Detecting the Confused Deputy in Azure DevOps MCP
A hidden pull-request comment turned legitimate MCP calls into a cross-project data path. Detecting it requires source, identity, scope, sequence, and sink.