Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-05 · source-backed
VIPER-MCP swept roughly 40,000 MCP server repos and produced 106 zero-days and 67 CVEs, while Censys counted 12,520 internet-exposed MCP services with about 40% completely unauthenticated (Adversa AI). Akamai separately disclosed SQL injection in Apache Doris MCP and unauthenticated metadata exfiltration in Alibaba RDS MCP. We speed-ran every mistake of the early API era, except faster and with tool-execution attached. If you run a remote MCP server and it doesn't have auth in front of it, that's the bug. Fix it today.
Each link below shares sources, entities, or timing with this story.
Adversa AI criticizes MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Akamai, Apache Doris MCP, MCP, SQL; overlapping topics (akamai, alibaba, apache, auth, server).
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Akamai, Censys, CVEs, MCP; overlapping topics (agent, auth, server).
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Censys, CVEs, MCP, VIPER; overlapping topics (auth, censy, counted, cves, server).
Adversa AI criticizes MCP / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, MCP, VIPER; reported by the same outlet (adversa.ai).
Adversa AI criticizes MCP / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, Censys, MCP; cite the same source (Adversa AI).
Adversa AI criticizes MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Adversa AI criticizes MCP); both cover MCP, SQL; overlapping topics (agent, alibaba, apache, dori, server).
Adversa AI criticizes MCP / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Adversa AI criticizes MCP); both cover Adversa AI, CVEs, MCP; reported by the same outlet (adversa.ai).
Adversa AI criticizes Windsurf / Shared entities / What happened next / Tension
Linked by a graph relationship (Adversa AI criticizes Windsurf); both cover CVEs, MCP, VIPER; picks up the CVEs thread on 2026-06-26.