Microsoft Flags MCP Tool Descriptions as Hidden AI Agent Attack Path

Microsoft warns that MCP tool descriptions can be manipulated to redirect AI agents, exposing sensitive data through trusted ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
Microsoft

AutoJack: How a single page can RCE the host running your AI agent

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

PayU Brings AI Coding And CLI Tools To Payment Developers

PayU has launched Builder MCP and CLI, two AI-powered developer tools that speed payment gateway integrations and simplify ...
TechnoSports

PayU Launches CLI & Builder MCP — The AI-Powered Developer Tools That Turn Days of Payment Integration Into Hours

If you've ever spent days wrestling with payment gateway documentation just to ship a checkout integration, PayU just made that pain a lot smaller. India's ...
CSOonline

Claude Code has an MCP security problem — and your developers are already using it

Claude Code is Anthropic’s AI coding assistant — a command-line tool that developers are adopting fast. It connects to external services through Model Context Protocol, the standard that lets AI tools ...
CNBC

Microsoft unveils new AI models to lessen reliance on OpenAI and lower costs for developers

At its Build developer conference in San Francisco, Microsoft announced MAI-Code-1-Flash, its inaugural model in the AI coding space. Microsoft is trying to establish a presence with proprietary ...
CNBC

Microsoft and Google are late to AI coding, but 'absolutely critical' they compete for growth

Coding tools are becoming an increasingly big target for Google and Microsoft as they try to catch Anthropic and OpenAI in the red-hot market. Microsoft is gearing up for coding-related announcements ...
Ars Technica

Millions of AI agents imperiled by critical vulnerability in open source package

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to breach the servers running them and make off with sensitive data and ...
techtimes

Claude Code Plugins Get Official Directory: Anthropic Flags Unverified MCP Risks

Anthropic has formalized its Claude Code plugin ecosystem with an official, company-managed directory on GitHub — giving the tool's fast-growing developer community a single vetted source for ...
The Next Web

Microsoft’s quiet Claude Code retreat and the real cost of enterprise AI

In December of last year, Microsoft told thousands of its engineers, product managers and designers that they could use Claude Code, Anthropic’s command-line coding agent, on the company dime. By ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...