LiteLLM patched CVE-2026-59822, an authentication bypass in its MCP endpoint rated 8.8 High on CVSS 4.0 that affected every version below 1.84.0 and was added by CISA to the Known Exploited Vulnerabil…
A developer detailed four ways Amazon Cognito breaks an MCP server's OAuth flow, discovered while wiring an agent OAuth flow for cogDepot. The issues include Cognito's lack of support for RFC 8707 res…
Appwrite's engineering team, led by Christy and including intern Matej, built an MCP server that initially supported only stdio transport, then added a hosted version with OAuth-based authorization. T…
The MCP 2026-07-28 release candidate includes six SEPs that harden the protocol's OAuth layer, addressing issuer validation, credential binding, and client type declaration to fix mix-up attacks preva…
A developer with a decade of enterprise Java experience found that principles from building distributed systems—timeouts, idempotency, circuit breakers, rate limiting, and audit trails—transfer direct…
Two AI agent security startups, Arcade.dev and Convey, raised a combined $98 million in 72 hours, signaling a market gap as 80.9% of technical teams have AI agents in production but only 14.4% have fu…