Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Public story · 2026-02-22 · source-backed

MCP Security Infrastructure: Five Independent Defender Resources Now Exist

Issue

Confidence

source-backed

Sources

2

Redaction

redacted

Story

The MCP security tooling ecosystem has matured rapidly:

Adversa AI MCP Security TOP 25 — Most comprehensive vulnerability taxonomy (injection, confused deputy, credential theft, tool name spoofing, schema poisoning) adversa.ai
Vulnerable MCP Project — CVE database tracking critical MCP vulnerabilities including CVE-2026-25536 (TypeScript SDK cross-client data leak), CVE-2026-23744 (MCPJam inspector RCE), and chained mcp-server-git CVEs vulnerablemcp.info
MCPHammer — First open-source security testing framework from Praetorian
CoSAI MCP Security Guide — 12 threat categories from the Coalition for Secure AI
Cisco MCP Catalog + AI BOM — First enterprise vendor tooling

This represents category maturation from "MCP has security problems" to "here are the tools to fix them."

Related stories

Each link below shares sources, entities, or timing with this story.

Anthropic released MCP / Shared entities / Shared topic / What happened next / Tension
MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth
Linked by a graph relationship (Anthropic released MCP); both cover CVE, CVEs, MCP, RCE; overlapping topics (security, tool, tooling).
Microsoft supports MCP / Shared entities / Shared topic
Bitdefender Quantifies MCP Security Crisis: 53% Static Credentials, 8.5% OAuth
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVEs, MCP, RCE; overlapping topics (category, confused, credential, security).
Claude Code uses MCP / Shared entities / What happened next
The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework
Linked by a graph relationship (Claude Code uses MCP); both cover CVE, CVEs, MCP, RCE; picks up the CVE thread on 2026-03-05.
Anthropic released MCP / Shared entities / Same source domain / What happened next
MCP security debt hits critical mass: three CVEs in one month, 7,000+ exposed servers.
Linked by a graph relationship (Anthropic released MCP); both cover CVEs, MCP, RCE; reported by the same outlet (adversa.ai).
Anthropic released MCP / Shared entities / What happened next
MCP CVEs Hit 30 — Attack Surface Expanding to Developers
Linked by a graph relationship (Anthropic released MCP); both cover CVE, CVEs, MCP, RCE; picks up the CVE thread on 2026-03-03.
Cursor uses MCP / Shared entities / What happened next / Tension
The config file is the new attack surface, across every IDE.
Linked by a graph relationship (Cursor uses MCP); both cover CVEs, MCP, RCE; picks up the CVEs thread on 2026-06-26.
Claude Code uses MCP / Shared entities / Shared topic / What happened next
AI-Generated Code CVEs Hit 35 in March. The Growth Curve Should Scare You.
Linked by a graph relationship (Claude Code uses MCP); both cover CVE, CVEs; overlapping topics (security, tool, vulnerability).
10 Skills of the Day
Linked by a graph relationship (Claude Code uses MCP); both cover MCP, RCE; overlapping topics (catalog, credential, tool).

Source trail

adversa.ai vulnerablemcp.info

Entities

Adversa AI MCP Security TOP AI BOM Cisco MCP Catalog Coalition CoSAI MCP Security Guide CVE CVEs MCP MCP Security Infrastructure MCPHammer MCPJam Most Praetorian RCE Secure AI TypeScript SDK

Provenance

Canonical issue: Ramsay Research Agent — 2026-02-22
AI generated: no
Story unit: 2026-02-22-mcp-security-infrastructure-five-independent-defender-resources-now-exist
Labels: source-backed, canonical briefing excerpt