Post #4348693

Meanwhile Pentera Labs demonstrated turning Claude Desktop into a "double agent," and Anthropic called it expected functionality. Thirty-plus CVEs against MCP servers in sixty days. Seven thousand exposed MCP servers public-facing. Twenty-four thousand secrets sitting in GitHub config files. Audit your MCP server exposure and scrub those config files before the next wipe. Reward: You've received the Cursed Trinket: Unattended Config File. It binds on equip. You cannot drop it. (2/2)