Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-02 · source-backed
The August 1 release lands five MCP redaction fixes: URL credentials stripped from SDK errors, from tracing and tool metadata, and transport errors redacted for prompts/resources, direct cleanup, and nested cleanup. If you have an MCP server URL with an embedded token and you pipe agent traces to an observability backend, you have been leaking it. Upgrade.
Each link below shares sources, entities, or timing with this story.
Version bumps are usually boring. This one isn't, because of what it concedes. The OpenAI Agents SDK hit v0.13 with an any-LLM adapter, breaking the assumption that you'd be running OpenAI models inside OpenAI's framework. Requesty's SDK comparison has the details: alongside t...
If you wrote an MCP server before July, it's on a protocol shape the maintainers have already removed. Not deprecated-with-a-migration-window. Removed from the spec. MCP lead maintainers David Soria Parra and Den Delimarsky published an updated roadmap on August 22, and the re...
Released yesterday, one day after 0.21.0, v0.21.1 adds model call timeouts, run-scoped sandbox working directories, network-disabled Docker sandboxes and Modal sandbox resource options (GitHub). It also fixes the core honoring exact call-approval decisions and rejecting partia...
9-layer scanner pipeline: DLP, prompt injection, SSRF, MCP tool poisoning detection. Zero code changes, drop-in proxy for Claude Code, Cursor, OpenAI Agents SDK. (GitHub)
The July 10 release blocks tampering with session transcript files and makes background-task notifications state explicitly that no human input occurred, "preventing fabricated in-transcript approvals from being acted on" (Releasebot). If you run headless agents, this is a dir...
BlueRock scanned over 7,000 MCP servers against 22-plus security rules. 36.7% carry potential server-side request forgery exposure from unrestricted outbound fetch, and 42% handle credentials insecurely. Their worked example is Microsoft's 85K-star Markitdown MCP server and it...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.