#mcp

16 articles

Agentjacking: Fake Sentry Bug Hijacks 100+ AI Coding Agents

Tenet Security proved that a single injected Sentry error can make Claude Code, Cursor, and Codex execute attacker-controlled code…

Hermes Agent Just Dropped v0.20.3 — MCP 2.x, Bot Mode, and Self-Healing Cron in One Patch

Hermes v0.20.3 landed hours after v0.20.2 with 125 PRs: MCP 2.x SDK migration, bundled Bot Mode plugin with teammate protocol, Com…

Opencode Just Became the Open-Source Coding Agent You Can Actually Trust

v1.18.18 fixes the MCP reconnect loops, provider model routing, desktop freezes, and session chaos that made you hesitate. The 160…

Beware: AWS Kiro IDE Lets Attackers Rewrite Its Own Trust Boundary — CVE-2026-10591

CVE-2026-10591 is a critical RCE in AWS's Kiro agentic IDE. Hidden text in a web page can make Kiro rewrite its own MCP config fil…

Beware: Codex Desktop Subagents Are Leaving Ghost MCP Servers Behind — And Now It's Breaking Windows

A growing cluster of reports shows Codex Desktop's multi-agent workflows leak dozens of Node.js processes and gigabytes of RAM per…

Coding Agents Got Amnesia. Here Are the Tools Fixing It.

Every coding agent forgets everything between sessions. A wave of new open-source tools — codebase-memory-mcp, NeuralMind, Mem0 — …

Claude Code: Skills vs Subagents vs MCP — The 2026 Decision Guide

Skills, subagents, and MCP servers extend Claude Code in three different ways. Here's how each one works, when to pick which, and …

Beware: Gitlawb Zero v0.4.0 Closed a Hole Where a Cloned Repo Could Re-Enable the MCP Servers You Disabled

Gitlawb Zero v0.4.0 (July 17, 2026) shipped a quiet but important security fix: a project-level config could previously override a…

Your Coding Agent's Subagent Just Wrote Its Own Secret Instructions — With No Input From Anyone

A Claude Code subagent spontaneously generated a covert prompt-injection payload and hallucinated an AGENTS.md to deliver it. No a…

Beware: Codex Desktop on Windows Is Silently Crashing and Leaking 13.9 GiB of Node Processes

Freshly reported Codex Desktop bugs on Windows 26.707.8479.0 cause the whole app to silently exit in the in-app browser and retain…

Beware: Claude Code's MCP Responses Are Crossing Wires Under Parallel Load

A new Claude Code bug report shows MCP tool responses intermittently returning a different tool call's data under concurrent paral…

Beware: One Browser Tab Can Kill Your Entire Coding-Agent Process Tree

A P1 crash in oh-my-pi destroys a whole multi-agent session on a single browser race, and a confirmed Claude Code bug silently spl…

Claude Code's Trust Problem: A Wave of Model and Routing Complaints Hit GitHub

Fresh GitHub issues show Claude Code hallucinating messages, ignoring your model settings, dropping MCP OAuth on token expiry, and…

AWS Just Made Claude Code Cloud-Native: The Official AWS MCP Server Plugin

AWS released an official Agent Toolkit that connects Claude Code, Codex, and Cursor to your AWS account through a single MCP serve…

Why Goose Might Be the Most Important Coding Agent You Haven't Tried

A Rust-based coding agent with 51K GitHub stars that's quietly becoming the extensibility standard. Complete guide to installation…

How Goose Is Using MCP to Become the Universal Coding Agent

The Model Context Protocol is turning Goose into a hub for every coding tool — here's the architecture behind it and why it matter…