Mcp

The Model Context Protocol (MCP) lets AI agents call external tools and data — and introduces real risks: tool poisoning, indirect prompt injection, over-broad permissions, credential exposure and supply-chain trust. The risks that matter and the controls that reduce them.

REA (Reverse Engineer Anything) is an open-source GitHub MCP server for AI-driven reverse engineering of apps and binaries. What the repo does, how to use it, and the defender's take.

When you give an LLM the ability to call tools and take actions, you grant it real capability. The controls that keep LLM tool access safe: least privilege, human approval, sandboxing and logging.

The Model Context Protocol lets AI agents call external tools and data through MCP servers. The governance controls that prevent an over-privileged or malicious MCP server becoming your next incident.

How secure is Google AX vs LangGraph, CrewAI, Microsoft and OpenAI's agent orchestrators? Compared on sandboxing, egress, spend limits and audit trails.

VirusTotal released VTAI: a free, no-API-key MCP server and REST API letting AI coding agents check file, URL, domain and IP reputation. What the 7 tools actually do, the real limits, and what to know before wiring it into an agent.

VirusTotal’s free VTAI lets any AI agent check file and URL reputation in one call. Before your engineering team wires it in, here is the governance checklist: what it can leak, what it won’t block by default, and how to roll it out safely.

VirusTotal shipped VTAI, a free MCP server and REST API for checking files, URLs, domains and IPs — no paid key required. Here is how it actually compares to the abuse.ch feeds, urlscan.io, Google Safe Browsing and MetaDefender Cloud on coverage, quotas and auth friction.

Prompt injection explained for practitioners: direct vs. indirect attacks, why tool-calling agents make it worse, real attack patterns, and the defenses — treat tool output as data, scan it, and constrain what agents can do.

Searching for an application security free trial? PlayCISO has no no-card trial — but it does give you genuinely free, no-signup AppSec tools to run right now: an MCP server risk check, a prompt injection scanner, an identity risk calculator and a local LiteLLM IOC scanner.

A defensive brief on a fast-rising risk class: malicious or compromised LLM routers and MCP gateways that inject unintended tool calls, steal credentials in transit, and pivot across hosts. What the attack looks like, why it scales, and the controls that actually contain it.

A CISO guide to the OWASP MCP Governance & Risk Project: the four non-negotiable gates (owner, logging, scope, review), the Tier 0-4 classification, the eight-factor risk model, and how it maps to the OWASP MCP Top 10, LLM Top 10, NIST AI RMF, ISO 42001 and SOC 2. Plus a free tool that runs the check for a specific server.

CISA added LiteLLM CVE-2026-59822 (CVSS 8.8) to its Known Exploited Vulnerabilities catalog on Sep 3, 2026 — an unauthenticated attacker can establish an authenticated MCP session against the popular AI gateway. Why the gateway is the prize, and how to respond.

Microsoft detailed a coordinated campaign (Aug 2026) hitting exposed AI infrastructure — LiteLLM, RAGFlow, Kestra — to steal every model-provider API key and then mine crypto on the box. The CVEs, the credential-harvesting playbook, and how to lock your AI control points down.