Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-08 · source-backed
Trend Micro's follow-up counted 1,467 publicly exposed MCP servers with CVSS 9.8 command-injection flaws in unofficial AWS and Azure MCP servers. Censys found 12,520 internet-accessible MCP services, most unauthenticated. An automated VIPER-MCP sweep of ~40,000 repos produced 67 CVEs. Treat every remote MCP server as a remote-code-execution surface, not a tool list. Put auth in front of all of them and pull the unauthenticated ones off the public internet. Most operators still haven't.
Each link below shares sources, entities, or timing with this story.
AWS partners with Anthropic / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (AWS partners with Anthropic); both cover Azure MCP, CVEs, CVSS, MCP; overlapping topics (auth, azure, cves, found, server).
Microsoft uses AWS / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft uses AWS); both cover Censys, CVEs, CVSS, MCP; overlapping topics (auth, flaw, server).
Trend Micro criticizes MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Trend Micro criticizes MCP); both cover Censys, CVEs, MCP, VIPER; overlapping topics (auth, censy, counted, cves, server).
Microsoft uses AWS / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft uses AWS); both cover CVEs, CVSS, MCP, Treat; overlapping topics (azure, cves, cvss).
Trend Micro criticizes MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Trend Micro criticizes MCP); both cover CVEs, CVSS, MCP; overlapping topics (auth, cves, cvss, server, unauthenticated).
Microsoft uses AWS / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft uses AWS); both cover CVEs, CVSS, MCP, Treat; overlapping topics (attack, cves).
Trend Micro criticizes MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Trend Micro criticizes MCP); both cover AWS, MCP, Most; overlapping topics (attack, auth, server).
Cursor partners with AWS / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Cursor partners with AWS); both cover CVEs, MCP, VIPER; overlapping topics (attack, cves).