6. Over-permissive Marketplace Installations
6. Over-permissive Marketplace Installations
Attack: An organization installs an MCP Server from a public registry without validating its scope or capabilities. Impact: Server has permission to call outbound APIs, access local file system, or leak data to attacker domains. Mitigation:- Only install verified packages (e.g., signed, reviewed)
- Run servers in isolated containers with strict runtime permissions
- Use runtime permission manifest (similar to Android apps)
Uncategorized @us-en
Oct 16, 2026
CVE-2026-102764: BeyondTrust Zero-Day Exploited
BeyondTrust has disclosed CVE-2026-102764, a critical Remote Support vulnerability exploited as a zero-day weeks before customers received a patch. The attack began…
Cyber News
Oct 15, 2026
Cisco Secure Email & PAN-OS Zero-Days Exploited
Cisco Secure Email & PAN-OS Zero-Days Exploited Cisco and Palo Alto Networks have patched two actively exploited zero-day vulnerabilities that can lead…
CTI Fundamentals
Oct 15, 2026
SOCRadar Splunk Integration: New MSSP and Vulnerability Apps
SOCRadar Splunk Integration: New MSSP and Vulnerability Apps Your analysts live in Splunk. Your external risk does not: SOCRadar alarms for dozens…
Intelligence in your inbox every Thursday.
Join 30,000+ security professionals reading SOCRadar research.
Subscribe