Beat: mcp-security

4 pieces filed under mcp-security, newest first.

• MCP Apps Let a Tool Server Draw the Interface You Click

  MCP Apps makes the server asking for permission the same party that renders the interface you grant it in, and half the safeguards in its security model are phrased as…

• The Coding Agent Became a Security Scanner This Week. It's Also the Thing Being Scanned.

  In-loop AI security scanners inherit the trust model of the session they run in, so the same agents now hunting vulnerabilities are themselves a fresh attack surface,…

• Briefing · July 23, 2026 · afternoon

  Security moved inside the coding agent this week from both directions, as vendors shipped scanners that run in the agent loop while fresh CVEs turned the exact…

• Briefing · July 21, 2026 · afternoon

  Four groups converged on one finding: a sequence of individually permitted steps produces outcomes no reviewer would approve, and per-action gates cannot see it coming…