PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What Is the Model Context Protocol and Why It Matters

hackerone.com | blog | #ai-security | #mcp | #ai-agents | #llm | #hackerone | #hai | #anthropic
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Anthropic's Model Context Protocol (MCP) gives AI agents a universal interface to external tools and data; HackerOne explains why unsecured MCP can turn AI assistants into attack vectors.
Published
Collected

Related coverage

blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · about.gitlab.com
New MCP tools help platform teams scale automation safely
GitLab 19.4 expands the GitLab MCP server tool set so agents can run pipelines, open merge requests, and triage vulnerabilities, while writes, merges, and deletes still wait for a human reviewer.
blog · wiz.io
Growing the WIN AI Ecosystem with Agent Integrations
Wiz MCP agent integrations now let partner AI agents pull live Wiz context—Issues, findings, attack paths—on demand from customer tenants, with the WIN partners endpoint GA for building integrations.
tool · github.com
SpecterOps Skills: Open-Source LLM Agent Skills & MCP Plugin Marketplace for Red Teaming and AppSec
As AI-assisted offensive security evolves from simple prompting to multi-agent architectures, SpecterOps standardizes security craft into declarative skills and MCP interfaces, allowing operators to safely orchestrate complex red team tradecraft and reverse engineering directly through LLM agents.
tool · projectdiscovery.io
How Neo's Agent Architecture Evolved: From One Agent → Plan, Execute & Verify
Neo evolved from a sandboxed agent into a plan-execute-verify architecture with parallel subagents, driven by context, duration, and quality limits. Longest runs hit 14.7 hours and 2,398 tool calls.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
Back