Ars Technica Warns of “Protocol Pivoting” Risks in MCP Workflows
The analysis describes how untrusted content can reach higher-privileged tools through agent workflows. A confirmed Bulk Export MCP flaw has already been fixed.
Tag MCP
Microsoft and Hugging Face Make ThinkingBox Benchmark Available Through OpenEnv
The new public benchmark evaluates AI agents based on the final state of systems and the side effects of their actions—not just their text responses or successful tool calls.
Wiz Recorded Attacks on LiteLLM and Other Publicly Accessible AI Services
Wiz honeypot telemetry showed persistent attempts to exploit AI and MCP services. Researchers also recorded attacks targeting two LiteLLM vulnerabilities for which fixes are available.