Credential-Exposure

Anthropic MCP Server Security Risks and Secrets Exposure Explained

FIRST LOOK ATLAS OWASP HIGH ▲ 7.2 The Hacker News Aug 18, 2026

This analysis examines how Model Context Protocol (MCP) servers — the middleware layer connecting AI agents to enterprise tools and data — routinely store credentials in plaintext configuration files and propagate them across ungoverned environments. For defenders, the piece closes an awareness gap by naming concrete credential exposure patterns unique to the agentic AI layer, giving security teams a structured surface to inventory and govern. What remains unaddressed is tooling maturity: automated discovery, centralised secrets management integration, and runtime visibility into MCP server activity are still nascent capabilities that organisations must build rather than buy.

OpenAI, Anthropic, Google APIs Let Weaker Models Steal Reasoning

ATLAS OWASP HIGH ▲ 9.2 The Hacker News Aug 13, 2026

Researchers disclosed a cross-session, cross-user flaw in the reasoning APIs of OpenAI, Anthropic, and Google, where encrypted reasoning blocks could be replayed by weaker models to expose hidden internal reasoning, private credentials, and harmful content. Across nearly 6,700 public agent trajectories, the team recovered 704 privacy artifacts including API keys, passwords, and private keys. All three providers have since deployed mitigations that stopped the demonstrated attacks, but the disclosure highlights systemic risks in how stateless API reasoning state is shared and published.

AI Agent Hijacking via Legacy Infrastructure Exploits

ATLAS OWASP HIGH ▲ 7.5 The Hacker News Jun 23, 2026

Attackers are bypassing AI-layer defences entirely by exploiting unpatched legacy infrastructure — misconfigured Active Directory, stale credentials, and over-privileged IAM roles — to hijack the resources AI agents depend on. Research cited in the article shows 70% of organisations grant AI systems more access than a human in the same role, driving a 76% incident rate among over-privileged deployments. The article argues that securing AI agents requires closing the underlying infrastructure exposure gap, not just hardening the model layer.

Flowise and n8n: Auth Bypass in Exposed LLM Services

ATLAS OWASP HIGH ▲ 8.5 The Hacker News May 06, 2026

A scan of over one million exposed AI services found pervasive security failures including absent authentication, leaked API keys, and exposed business logic across self-hosted LLM deployments. Agent management platforms such as Flowise and n8n were discovered internet-exposed without access controls, revealing credential lists and internal workflows. The findings indicate systemic misconfiguration risk as enterprises race to self-host AI infrastructure without applying baseline security practices.

Moltbook Exposes 1.5M Tokens via Cross-App OAuth Risk

ATLAS OWASP HIGH ▲ 8.2 The Hacker News Apr 23, 2026

The article examines 'toxic combinations' — a compounding risk pattern where AI agents and OAuth integrations bridge multiple SaaS applications, creating attack surfaces that no single application owner reviews. A real-world case involving Moltbook exposed 1.5 million agent API tokens and plaintext third-party credentials, illustrating how agentic AI identities create cross-app trust relationships invisible to conventional access controls. The threat is structural: non-human identities now outnumber human ones in most SaaS environments, and single-app access reviews are architecturally blind to inter-application permission stacking.

Vercel Breach: Context.ai OAuth Token Hijack Exposes Credentials

ATLAS OWASP HIGH ▲ 7.5 The Hacker News Apr 20, 2026

Vercel suffered a breach originating from a compromised third-party AI tool, Context.ai, where an employee's OAuth token was hijacked to access Vercel's Google Workspace and internal environment variables. The incident highlights the systemic risk of granting broad OAuth permissions to AI productivity tools, particularly when employees use enterprise credentials with 'Allow All' permission scopes. ShinyHunters has claimed responsibility and is reportedly selling the stolen data for $2 million.