← Back to the boardNews
MCPJacking: 155 Hijackable MCPs Discovered Live in the Official MCP Marketplace
Why it’s here: Original technical research on a hijackable official MCP registry exposes a supply-chain and governance gap relevant to AI and cybersecurity policy, though it is partly vendor promotion and lacks an explicit federal hook.
Trace across the boardItem
7d agoAIR SecurityMCPJacking: 155 Hijackable MCPs Discovered Live in the Official MCP MarketplaceAIR Security reports it discovered 155 MCP servers in the Official MCP Registry that can be hijacked by re-registering lapsed domains their still-listed entries resolve to, enabling secret exfiltration from agents.1 outletCyber2 linked
Connected
2 links- NewsBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz BlogBoth involve MCP servers
- NewsAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxBoth involve AIR Security
About
- MCP servers