Stack layer / Threat pattern
NSA issues official MCP hardening guidance after Amazon Q auto-execution CVEs (CVSS 8.5) enable AWS credential theft
Wiz
Stack layer / Threat pattern
Show HN: Rowboat — Open-Source, Local-First Alternative to Claude Cowork With a Knowledge Graph
Hacker News / rowboatlabs
Stack layer / Threat pattern
'The MCP Governance Illusion' — Why Governing Tools Isn't Enough
Cyera / Hacker News
Stack layer / Threat pattern
Meniga Launches 'Fini,' an MCP Server Bringing Agentic AI Into Banks
Finovate
Stack layer / Threat pattern
A New Security Category Emerges: Tools That Police the Coding Agent, Not the Code — Snyk's Evo Agentic Development Security
SiliconANGLE
Stack layer / Threat pattern
CROSS-CATEGORY: Incumbents Reopen Themselves as 'Platforms of Agents' via MCP — Greenhouse's ATS MCP Goes Broad July 6
Multiple Sources
Stack layer / Threat pattern
OpenClaw ships broad July 6 platform update: GPT-5.6 support, external harness attach, hardened provider I/O
Releasebot
Stack layer / Threat pattern
Code-first analysis: make the agent write a script that returns only results instead of reading files into context
GitHub