Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-18 · source-backed
Researchers filed 30-plus MCP CVEs between January and February 2026, 43% of them shell injection, and a malicious server can hide agent-hijacking instructions inside tool descriptions. So scan descriptions at install and on every update, not once. The single most common misconfiguration across thousands of exposed servers is binding to 0.0.0.0 instead of 127.0.0.1. Fix that first. (Descope)
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released MCP); both cover February, MCP; overlapping topics (cves, description, injection, server, tool).
Cursor uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor uses MCP); both cover February, MCP; overlapping topics (between, tool).
Cursor uses MCP / Shared entity: MCP / Shared topic / Earlier coverage
Linked by a graph relationship (Cursor uses MCP); both cover MCP; overlapping topics (attack, description, injection, server, tool).
Claude uses MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (Claude uses MCP); both cover MCP; overlapping topics (description, server, tool).
Anthropic released MCP / Shared entity: MCP / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover MCP; overlapping topics (attack, injection, tool).
Trend Micro criticizes MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Trend Micro criticizes MCP); both cover MCP, Researchers; overlapping topics (server, tool).
Microsoft supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft supports MCP); both cover MCP, MCP CVEs; overlapping topics (attack, cves).
Cursor uses MCP / Shared entity: MCP / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Cursor uses MCP); both cover MCP; overlapping topics (attack, server, tool).