MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

Maintainers of the Model Context Protocol Python SDK have patched a high-severity OAuth weakness that could let a malicious MCP server steal authentication ...

This article is for those whose MCP servers configured in Claude Desktop or Claude Code stopped connecting one day after the end of July 2026. It targets Python-based servers launched with "command": ...

Four identity providers hit by critical vulnerabilities in three days. The common root: systems that accept credentials without verifying the binding between key and identity. The cryptographic ...

When you give an AI tools, the tool descriptions themselves become part of every transmission. The names, descriptions, and ...