Source Watch
Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
The Hacker News Vulnerabilities
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real serv…
LinuxSecurity - Security Articles Vulnerabilities
MCP Toolbox Flaw Could Expose Google Service Tokens
A September 23 advisory describes a flaw in the Python SDK used with MCP Toolbox: a shared cache could send a Google ID token to a service it was not meant for.