Fetching from the wire…
01
02
03
04
05
06
07
08
Top 5 · 2026-02-28 · source-backed
Independent researchers at Bitsight and Knostic discovered 8,000+ MCP servers visible on the public internet with admin panels, debug endpoints, and API routes completely unauthenticated. Default configurations binding to 0.0.0.0:8080. Exposed data includes full agent conversation histories containing reasoning chains, environment variables with API keys, database credentials, and internal service tokens. Simon Willison identifies the "lethal trifecta": private data + untrusted content + external communication. This is the MongoDB 2017 moment for AI infrastructure. What to do: Audit every MCP server you deploy — check bind addresses, require authentication, and sandbox network egress. If you're consuming third-party MCP servers, treat them as untrusted by default. (Bitsight, Knostic, Trend Micro)
Each link below shares sources, entities, or timing with this story.
Cursor uses MCP / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Cursor uses MCP); both cover MCP, Trend Micro; reported by the same outlet (trendmicro.com).
Claude uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude uses MCP); both cover Audit, MCP; overlapping topics (agent, audit, chain, check, server).
Microsoft supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover Audit, MCP; overlapping topics (authentication, chain, server).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover MCP Servers Exposed, MongoDB; overlapping topics (authentication, exposed, internet, server).
Microsoft supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover MCP, Simon Willison; overlapping topics (agent, data).
Anthropic released MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Audit, MCP; overlapping topics (agent, server).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover Audit, MCP; overlapping topics (agent, chain, server).
CrewAI supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (CrewAI supports MCP); both cover MCP, Trend Micro; overlapping topics (agent, authentication, server).