News
Adversa's latest digest on MCP security shows that authentication there is often absent or bypassable.
LiteLLM's MCP endpoint accepted any invalid bearer token.
This LiteLLM flaw is the first MCP vulnerability added to CISA's KEV list.
Two functional malicious MCP servers got clean results from five scanners.