A developer built a four-container demo showing that deny-by-default tool-name allowlists fail to stop MCP tool poisoning, because an MCP server can rewrite its own tool descriptions mid-session after…
Pillar Security researchers traced an active MCP supply-chain campaign called Deadbugz to a single GitHub account, `zellkernel`, which filed 23 pull requests across unrelated AI, MCP, and developer-to…
Pillar Security documented Deadbugz, a malicious MCP server attributed to GitHub account zellkernel, which targeted 23 GitHub repositories in one evening and breached none. The server evades detection…
A supply-chain attack dubbed Deadbugz hit 23 Model Context Protocol (MCP) projects in 74 minutes, according to a new audit that also found 91.8% of production MCP servers have no authentication. The a…
Pillar Security researchers identified an active campaign, dubbed Deadbugz, that distributes a malicious Model Context Protocol (MCP) server named 'productivity-suite' via 23 GitHub pull requests from…