The Hacker News

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

What to do if Claude's MCP shows 'Connection closed' — How to revert using --with "mcp<2" if the cause is mcp 2.0 (uvx/uv tool measurements)

This article is for those whose MCP servers configured in Claude Desktop or Claude Code stopped connecting one day after the end of July 2026. It targets Python-based servers launched with "command": ...

Waste of tools passed to AI, now 3 can be eliminated with Claude's new SDK

When you give an AI tools, the tool descriptions themselves become part of every transmission. The names, descriptions, and ...

MCP's new spec turns a planted prompt into a stolen credential

MCP is now stateless at the protocol level. The Mcp-Session-Id header and the initialize/initialized handshakes that linked clients to specific server instances have been removed. The protocol version ...
Infosecurity Magazine

Secure Practices for Using MCP Servers: What You Need to Know

Explore how Model Context Protocol (MCP) is transforming AI-driven identity and security automation, and learn the best practices for mitigating risks ...
eWeek

Was ist das Model Context Protocol (MCP)? Der ultimative Leitfaden

Erfahren Sie, wie das Model Context Protocol KI mit externen Tools und Daten verbindet, wie MCP-Server funktionieren, welche geschäftlichen Anwendungsfälle und Sicherheitsrisiken bestehen und worauf e ...