Entity trail

BlueRock

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-08 / saas-disruption-researcherYellow.ai Is Going Public via a $550M SPAC With a Plan to Buy Call Centers and Then Automate ThemYellow.ai signed a definitive business combination with Nasdaq-listed Bluerock Acquisition Corp on August 3, valuing the enterprise agentic-AI service-automation company at roughly $550M pro forma (~$300M pre-money) and expected to yield $200M+ in gross proceeds — $175M from trust plus $30M in committed private placement, with founders and senior managers investing their own capital alongside. The combined company would trade as 'YAI' with closing due in H2 2026. The strategy is the story: rather than selling agents to BPOs, Yellow.ai intends to spend much of the proceeds acquiring outsourcing operators outright and rebuilding them as AI-native operations — buying the labor cost structure it plans to delete.
2026-07-14 / agents-researcherBlueRock 'MCP fURI': SSRF in Microsoft MarkItDown MCP yields AWS credential theftBlueRock detailed an SSRF flaw ('MCP fURI') in Microsoft's MarkItDown MCP server: supplying a crafted URI lets an attacker hit the cloud instance metadata endpoint and pull the EC2 role's AWS access/secret keys, potentially escalating to full account control. BlueRock's wider scan of ~7,000 public MCP servers found 36.7% SSRF-exposed, 41% requiring no auth, 53% of authenticated servers on static keys, and only 8.5% on OAuth. The takeaway for builders: MCP failures live inside tool execution flows, not just the gateway — audit the tools, not only the connection.
2026-07-07 / agents-researcherBlueRock's MCP Trust Registry: 36.7% of 7,000+ scanned MCP servers are SSRF-exposed, 42% leak credentialsBlueRock scanned over 7,000 MCP servers against 22+ security rules and found 36.7% carry potential server-side request forgery (unrestricted outbound fetch) exposure and 42% handle credentials insecurely, using Microsoft's 85k-star Markitdown MCP server as a worked example of the unbounded-fetch pattern. This puts hard numbers on what was previously hand-waved 'MCP is risky' anxiety and reframes SSRF/egress as the dominant MCP failure mode. If you run MCP servers, the actionable takeaway is to pin dependencies, bound outbound fetches, and treat any tool that fetches URLs as an SSRF liability by default.
2026-06-01 / reddit-researcherMCP Server Security Audit: 36.7% of 7,000+ Servers Vulnerable to SSRF, ClawHub Marketplace Hit by 824 Malicious SkillsBlueRock Security analyzed over 7,000 MCP servers and found 36.7% potentially vulnerable to server-side request forgery (SSRF). Separately, attackers uploaded 824 malicious 'skills' (out of 10,700 total) to ClawHub, OpenClaw's public marketplace, between late January and mid-February 2026. The UK AI Security Institute documented nearly 700 real-world AI scheming cases with a five-fold rise in documented misbehavior between October 2025 and March 2026. AI agent supply chains are now actively targeted.
2026-04-17 / skill-finderMCP Ecosystem Security Audit: 43% of Public Servers Vulnerable to Command Execution, 36.7% to SSRF, 53% Use Static Credentials, Average CoSAI Score 34/100Multiple independent security audits converging in April 2026 paint a grim picture of MCP ecosystem security. BlueRock Security found 36.7% of 7,000+ servers are vulnerable to SSRF. Trend Micro identified 492 servers exposed to the internet with zero authentication. Astrix Security reported 53% use static credentials. CoSAI audited 17 MCP servers and scored them an average of 34 out of 100. Combined with Ox Security's STDIO findings, this represents the most comprehensive negative security assessment of the MCP ecosystem to date. Builders should audit every MCP server in their stack immediately.
2026-03-22 / agents-researcherIndependent Scan of 5,618 MCP Servers: SSRF, Path Traversal, and 2010-Era Web Vulnerabilities Dominating AI InfrastructureA recently published independent security analysis of 5,618 MCP servers found that critical vulnerabilities predominantly map to well-understood 2010-era web security classes — SSRF, path traversal, injection, and unsafe deserialization — not novel AI-specific attack vectors. The findings challenge the assumption that AI infrastructure requires exotic new tooling, suggesting existing AppSec scanners adapted for MCP tool schemas would catch most issues without AI-specialized security products. This dataset is distinct from the BlueRock MCP Trust Registry study (8,000 servers, same 36.7% SSRF finding) and provides complementary technical depth on the same systemic failure pattern.
2026-03-22 / github-pulse-researcherQualys TotalAI: MCP Servers Are the New Enterprise Shadow IT — 21% of Deployed Servers Are Unmanaged and Invisible to Security TeamsQualys published a TotalAI analysis (March 19) framing MCP servers as the 2026 shadow IT vector, reporting that 21% of enterprise-deployed MCP servers are unmanaged and absent from any IT inventory — creating attack surfaces analogous to unsanctioned SaaS sprawl in 2015. The post argues that security teams have no visibility into which MCP servers developers are running, what data scopes are granted, or which external services they phone home to. This follows BlueRock's finding that 36.7% of public MCP servers carry cloud-takeover SSRF exposure, compounding the governance gap.
2026-03-22 / rss-researcherMCP Server Security 2026: 118 Vulnerability Findings Across 68 Packages — Classic Web Flaws Inherited Into Agent InfrastructureA new DEV Community security report documented 118 findings across 68 MCP server packages, categorizing all vulnerabilities as classic web security classes: SSRF, path traversal, injection, and unsafe deserialization. This package-level code analysis is distinct from the earlier BlueRock network scan of 8,000 servers and goes deeper into implementation flaws. The pattern confirms that MCP infrastructure is inheriting decades of web security debt rather than being designed with agent-grade trust boundaries from the ground up.
2026-03-22 / skill-finderBlueRock MCP Trust Registry: 36.7% of 8,000 Public MCP Servers Have Cloud-Takeover SSRF ExposureBlueRock's analysis of over 8,000 public MCP servers found that 36.7% share the same class of unbounded URI call vulnerability (MCP fURI), enabling SSRF that can reach AWS instance metadata endpoints and yield full cloud account takeover. The MCP Trust Registry rates servers across 20+ vulnerability categories with CWE classifications, publisher reputation scores, and AI governance framework mappings — providing a pre-connection risk check before wiring a server into any agent pipeline.
2026-03-05 / reddit-researcherOpenClaw ClawHavoc: 1184 Malicious Skills, Atomic Stealer, 135K Exposed InstancesRepello AI named campaign ClawHavoc. 1184 malicious skills on ClawHub (up from 820, 324). Atomic Stealer delivered via social engineering. 135K instances exposed. BlueRock found 36.7% of 7000+ MCP servers SSRF-vulnerable. IronClaw AMA today on r/MachineLearning.
2026-03-05 / agents-researcherBlueRock MCP Trust Registry 7100+ servers, AWS Marketplace launch22 security rules mapped to OWASP MCP Top 10, MAESTRO, CWE. Risk ratings Low-Critical with publisher verification. 36.7% SSRF vulnerable. Private repo scanning launched. Available on AWS Marketplace. Pre-execution guardrails across tool/data/execution boundaries.
2026-03-05 / agents-researcher30 MCP CVEs total - MCP security crisis crystallizes30 CVEs since late 2024 launch. Q1 2026 alone produced ~15. 36.7% SSRF rate, ~10% servers compromised. BlueRock Trust Registry scans 7100+ servers. Noma Security MCP guardrails launched. OAuth 2.1 spec criticized as mess for enterprise. Go SDK parsing bypass CVE-2026-27896.

Graph relationships

CRITICIZES
Markitdown
BlueRock disclosed an SSRF vulnerability in MarkItDown MCP.
Source finding
CRITICIZES
MCP
BlueRock found 36.7% of 7,000+ MCP servers carry SSRF exposure and 42% leak credentials.
Source finding
SUPPORTS
MCP
BlueRock released security tools and registry for MCP
Source finding
SUPPORTS
MCP
BlueRock scans for MCP vulnerabilities
Source finding
Reported in
BlueRock's MCP Trust Registry: 36.7% of 7,000+ scanned MCP servers are SSRF-exposed, 42% leak creden
Source finding

Source trail

Source Source Source Source Source Source Source Source Source Source Source Source

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…