Fetching from the wire…
Public story · 2026-03-17 · source-backed
Token Security's RSAC 2026 presentation documents an RCE chain in Microsoft's Azure MCP server that compromises entire cloud environments. 38% of 500+ public MCP servers have no authentication. Every tool parameter is an untrusted injection surface. Source
Each link below shares sources, entities, or timing with this story.
Microsoft released Azure MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft released Azure MCP); both cover Azure MCP, Conference, CVEs, Days; overlapping topics (authentication, azure, chain, cves, have).
Token Security criticizes Azure MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Token Security criticizes Azure MCP); both cover Azure MCP, GlobeNewswire, MCP, MCPwned; overlapping topics (azure, chain, server).
Linked by a graph relationship (Token Security criticizes Azure MCP); both cover Azure MCP, MCPwned, Microsoft, RCE; overlapping topics (azure, chain, server).
Microsoft released Azure MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Azure MCP); both cover CVEs, Days, MCP, Microsoft; overlapping topics (authentication, azure, cves, days, injection).
Linked by a graph relationship (Microsoft released Azure MCP); both cover GlobeNewswire, MCP, Microsoft, RCE; overlapping topics (chain, server).
Microsoft released Azure MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released Azure MCP); both cover CVEs, MCP, Microsoft, RCE; overlapping topics (chain, cves, have, microsoft).
Linked by a graph relationship (Microsoft released Azure MCP); both cover CVEs, MCP, Microsoft, RCE; overlapping topics (chain, server).
Microsoft released Azure MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Azure MCP); both cover CVEs, MCP, Microsoft; overlapping topics (chain, microsoft, server).