vibehacker
News
Forkast ·

Five MCP auth mechanisms ship in two weeks after security disclosures

Between mid-September and Sept 30, Okta Agent SSO, SSOJet, Rubrik MCP, GitHub Copilot’s MCP auth customizer, and Operant’s Okta-linked gateway each shipped MCP authentication—none interoperable—after LiteLLM’s CISA KEV bypass and Cycode’s MCP Python SDK OAuth theft. Identity is catching up; NSA-noted RBAC at connect time is still open.

More news

View all

Darktrace MCP Server now generally available

Announced Nov 13, the server lets AI assistants query security alerts, pull Cyber AI Analyst findings, and run triage actions across licensed Darktrace products. A read only mode hides tools that change data…

Darktrace

Spotted something we missed? Start a thread.