Meta launches the biggest and best AI models it has ever built11m ago AMD puts 32,768 CPU cores in a rack built for AI agents29m ago Smug until weirdly silent: who told us to say “I am alive”?36m ago Anthropic's Claude AI submitted false murder tip to Philadelphia police37m ago How Anthropic’s Dynamic Workflows Coordinate Claude Agents40m ago Dell’s AI partner ecosystem adapts to Silicon Valley’s build-it-yourself buyers42m ago AWS Expands GPT-6 Access on Amazon Bedrock to Five Asia Pacific Regions46m ago Disney's new CTO tells staff he 'won't pretend it will be easy' to win in the changing media landscape49m ago OpenAI Adds New Irish Roles in Boost to Firm’s EU Headquarters50m ago Manifold Steering from a Natural State is Effective and Generalizable, but Relies on Model Accuracy52m ago Microsoft Research Introduces StudentSim for AI Tutor Training52m ago Why Big Tech Is Borrowing Billions to Fund AI Spending56m ago Meet the Anthropic Engineer Keeping Its AI Agent Trustworthy58m ago Meta Unveils New Series of Advanced A.I. Models2h ago

Meta launches the biggest and best AI models it has ever built11m ago AMD puts 32,768 CPU cores in a rack built for AI agents29m ago Smug until weirdly silent: who told us to say “I am alive”?36m ago Anthropic's Claude AI submitted false murder tip to Philadelphia police37m ago How Anthropic’s Dynamic Workflows Coordinate Claude Agents40m ago Dell’s AI partner ecosystem adapts to Silicon Valley’s build-it-yourself buyers42m ago AWS Expands GPT-6 Access on Amazon Bedrock to Five Asia Pacific Regions46m ago Disney's new CTO tells staff he 'won't pretend it will be easy' to win in the changing media landscape49m ago OpenAI Adds New Irish Roles in Boost to Firm’s EU Headquarters50m ago Manifold Steering from a Natural State is Effective and Generalizable, but Relies on Model Accuracy52m ago Microsoft Research Introduces StudentSim for AI Tutor Training52m ago Why Big Tech Is Borrowing Billions to Fund AI Spending56m ago Meet the Anthropic Engineer Keeping Its AI Agent Trustworthy58m ago Meta Unveils New Series of Advanced A.I. Models2h ago

Cybersecurity Public Sector8 min reading time

Researcher Discloses Same MCP Flaw at Google, JPMorgan, Two Governments

Unite.AIPublished 7 days ago

Read the full article

Security researcher Syed Anas Mohiuddin revealed that a server-side request forgery (SSRF) vulnerability in Model Context Protocol (MCP) servers was independently found and fixed by Google, JPMorgan Chase, Weaviate, and two government bodies. The flaw stems from unsafe handling of agent-supplied URLs, allowing malicious redirection of server requests, with Google’s MCP Toolbox receiving a high-severity CVE in mid-2026. Despite fixes, several US federal MCP servers remain vulnerable.

More on this story

Google, JPMorgan and two governments fixed the same MCP flaw
7d· The Next Web

#france #google #jpmorgan-chase #security-vulnerabilities #server-side-request-forgery #syed-anas-mohiuddin #weaviate

More in Cybersecurity

Cybersecurity2 min read

Russia was not ready for the data center war it started with Ukraine

Covered by 2 sources1d ago

Cybersecurity4 min read

UK to strengthen cyber defences as minister calls for AI firms to increase safety efforts

Covered by 2 sources20h ago

Cybersecurity5 min read

When AI Becomes The Threat: A Blueprint For Managing Frontier AI Risk

Covered by 2 sources2d ago