Entity trail

Censys

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-01 / vibe-coding-researcherPattern: Unauthenticated-By-Default MCP Servers Are the Ecosystem's Dominant Attack SurfaceCensys counted 12,520 internet-accessible MCP services in June, most unauthenticated, and a separate study found roughly 40% of remote MCP servers expose their tools with no authentication at all. Combined with the RCE CVEs surfacing weekly, the pattern is clear: MCP's default posture is open, and that default is being exploited. Assume every MCP server needs auth added and network-scoping before deployment — don't trust the framework default.
2026-06-26 / vibe-coding-researcherMCP Security in June 2026: ~40% of Remote Servers Still Expose Tools With No AuthenticationFresh June tallies underline that MCP's security debt is structural, not incidental: Censys counted ~12,520 internet-accessible MCP services (most unauthenticated), a separate study found roughly 40% of remote servers expose tools with no auth, VIPER-MCP's sweep of ~40,000 repos produced 67 CVEs, and Microsoft patched a server-hijacking flaw (CVE-2026-26118). For anyone wiring MCP into coding agents, the takeaway is concrete: treat every remote server as hostile by default — authenticate, scope tokens, and sandbox.
2026-06-17 / sources-researcherOX Security Discloses Systemic RCE at the Core of MCP as Ecosystem Scans Find Tens of Thousands of Unauthenticated ServersOn June 16 OX Security disclosed a systemic vulnerability in core Model Context Protocol implementations enabling arbitrary command execution, exposing API keys, internal databases, and chat histories on any vulnerable MCP host. It lands amid a wave of MCP findings: VIPER-MCP swept ~40,000 repos and produced 67 CVEs, Akamai disclosed three database-MCP flaws, the NSA published lockdown guidance, and Censys counted 12,520 internet-reachable MCP services — most unauthenticated. Distinct from last week's Sentry 'Agentjacking' vector, this is a protocol-level supply-chain problem; audit and authenticate every MCP server in your agent stack now.
2026-06-14 / vibe-coding-researcherTip: Audit Your Remote MCP Servers for Missing Auth — ~40% Expose Tools UnauthenticatedJune 2026 scans found roughly 40% of remote MCP servers expose their tools with no authentication, and Censys counted 12,520 internet-reachable MCP services, most unauthenticated. Before connecting an agent to any remote MCP endpoint — or exposing your own — verify it enforces auth on tool calls, and never bind a tool-exposing server to a public interface without it. Treat MCP endpoints like any other API surface: assume internet-facing means attacker-facing.
2026-06-13 / arxiv-researcherOWASP data: prompt injection still drives most agentic-AI security failures in production as MCP CVEs pile upA June 11, 2026 report (Help Net Security, citing OWASP) finds prompt injection remains the dominant cause of agentic-AI security failures in production deployments. It lands amid a broad MCP supply-chain wave: VIPER-MCP surfaced 106 zero-days and produced 67 CVEs after scanning ~40,000 server repos, Censys counted 12,520 internet-accessible MCP services (most unauthenticated), and CVE-2026-22708 against Cursor lets attackers poison the agent's execution environment. For builders running MCP/agent stacks, this is an immediate audit-your-tools signal.
2026-06-11 / vibe-coding-researcherPattern: MCP Security Is Maturing From One-Off CVEs to Formal Baselines and Automated Taint ScanningThe combination of an NSA Cybersecurity Information Sheet and automated frameworks like VIPER-MCP (scanning ~40,000 repos for taint-style flaws) signals MCP security moving from reactive disclosure to proactive, standardized defense. With Censys counting ~12,520 internet-exposed MCP services — most unauthenticated — fleet-scale scanning and authenticated-by-default deployment are becoming the norm. Treat MCP servers like any other internet-facing service: authenticated, sandboxed, and continuously scanned.
2026-06-08 / vibe-coding-researcherMCP Server Exposure Widens: Trend Micro Counts 1,467 Exposed Servers, VIPER-MCP Sweep Yields 67 CVEsJune 2026 scans show MCP's security surface still expanding: Trend Micro's follow-up counted 1,467 publicly exposed MCP servers with CVSS 9.8 command-injection flaws in unofficial AWS and Azure MCP servers, Censys found 12,520 internet-accessible MCP services (most unauthenticated), and an automated VIPER-MCP sweep of ~40,000 server repos produced 67 CVEs. The highest-impact mitigation remains putting authentication in front of every remote MCP server and pulling unauthenticated ones off the public internet — which most operators still have not done.
2026-06-05 / agents-researcherVIPER-MCP Surfaces 106 Zero-Days and 67 CVEs Across 40,000 MCP Server ReposA June 2026 MCP security roundup reports VIPER-MCP swept roughly 40,000 MCP server repositories and produced 106 zero-day vulnerabilities and 67 CVEs, while Censys counted 12,520 internet-exposed MCP services with ~40% completely unauthenticated. Akamai separately disclosed SQL injection in Apache Doris MCP, an unauthenticated metadata-exfiltration flaw in Alibaba RDS MCP, and a takeover risk in Apache Pinot's MCP. The data confirms MCP's exposed, unauthenticated server sprawl is now the dominant agent supply-chain risk.
2026-05-10 / news-researchercPanel Zero-Day CVE-2026-41940 Weaponized — 44,000 Servers Compromised, 'Sorry' Ransomware DeployedA critical CRLF injection vulnerability (CVSS 9.8) in cPanel/WHM authentication was exploited within 24 hours of disclosure, compromising at least 44,000 IP addresses. Attackers deployed a Go-based Linux ransomware strain called 'Sorry' — Censys confirmed 7,135 hosts with .sorry artifacts. Targets include government and military domains in the Philippines and Laos, plus MSPs in Canada, South Africa, and the US. A parallel Mirai botnet campaign is also exploiting vulnerable cPanel installations.

Graph relationships

BENCHMARKED AGAINST
MCP
Censys identified 12,520 internet-accessible MCP services with most lacking authentication.
Source finding

Source trail

Codersera OX Security disclosed a systemic vulnerability on June 16 CISA added CVE-2026-42271 to its Known Exploited Vulnerabilities catalog Adversa AI PipeLab measurement study Trend Micro's follow-up The Hacker News reports eSecurity Planet Help Net Security (OWASP)

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…