Industry news
What's changing in MCP, AI agents and messaging platforms — and what it means for your business.
An MCP server behaved for three calls, then went looking for your SSH keys
Security researchers disclosed an active campaign — tracked as Deadbugz — distributing a malicious MCP server through GitHub pull requests. It answers normally for two tool calls, then rewrites its own tool metadata on the third to hunt for credentials. Nothing was compromised, but the technique is the story.
The first MCP vulnerability just landed on CISA's exploited list
On September 2, CISA added a LiteLLM authentication bypass to its Known Exploited Vulnerabilities catalog — the first Model Context Protocol flaw on that list. A critical bug in AWS Labs' own Postgres MCP server followed a week later.
MCP was never just for software — Anthropic just proved it
On 28 August Anthropic opened a research preview letting AI agents operate lab and manufacturing hardware through MCP-compatible interfaces. It has nothing to do with a support chatbot — and it is still worth twenty minutes, because it tests whether the protocol we built on actually generalizes.
EU AI Act and chatbots: the disclosure rule, and a compliance checklist for customer service
Article 50 of the EU AI Act has applied since 2 August 2026: if people can talk to your AI, you have to tell them — at the point of interaction, in their language, on every channel. Here is what the rule asks of a customer-service chatbot, what it does not, and a checklist you can finish in an afternoon.
WhatsApp's other price change: AI replies are now billed by the token
From 1 August 2026 Meta bills Business Agent conversations on tokens consumed, and from 1 October it starts charging for service replies again. Two different meters, five weeks apart, and most of the coverage only mentions one.
Most MCP servers still skip OAuth. That is the whole security story.
The specification makes OAuth 2.1 mandatory. Surveys of the public server ecosystem suggest only a small minority implement it. If you are about to connect an MCP server to an assistant that can see your work, that is the first thing to check.
MCP Shadow IT: your team is already connecting servers nobody vetted
Connecting a remote MCP server takes a URL and about ten seconds. That is the feature. It is also why a new category of shadow IT now has a name and a threat model.
MCP went stateless. What changed, and why we still speak the old protocol.
The 2026-07-28 revision removed the initialize handshake and the session header. It makes MCP servers scale like any other HTTP service — and it leaves every client that has not caught up behind.
MCP is not one vendor's protocol any more
Anthropic donated the Model Context Protocol to the Agentic AI Foundation under the Linux Foundation in December 2025. If lock-in was your objection to building on MCP, it no longer holds.
Who pays when the agent buys? AP2, x402, ACP and MPP, plainly
Four protocols, four layers of the same problem: letting software spend money on your behalf without it becoming a disaster. Here is what each is actually for, and what is still genuinely unsettled.