Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →
Zealynx research

Security Research.

Public write-ups on the bugs, patterns, and protocols we audit. Engineer-to-engineer, no fluff.

31 results for "MCP"

Search.

Clear search
Postmark MCP Supply-Chain Attack: ASI04 in Production
AI securityJun 12

Postmark MCP Supply-Chain Attack: ASI04 in Production

12 min read
EscapeRoute Explained: Anthropic Filesystem MCP CVEs
AI securityJun 5

EscapeRoute Explained: Anthropic Filesystem MCP CVEs

13 min read
CVE-2025-49596: Anthropic MCP Inspector RCE Explained
AI securityMay 29

CVE-2025-49596: Anthropic MCP Inspector RCE Explained

12 min read
Cursor IDE MCP CVEs: MCPoison & CurXecute Explained
AI securityMay 22

Cursor IDE MCP CVEs: MCPoison & CurXecute Explained

11 min read
Anthropic MCP SDK Vulnerability (April 2026): Full Analysis
AI securityMay 15

Anthropic MCP SDK Vulnerability (April 2026): Full Analysis

12 min read
MCP Vulnerabilities 2025-2026: 16+ CVEs & Breach Index
AI securityMay 8

MCP Vulnerabilities 2025-2026: 16+ CVEs & Breach Index

14 min read
How to Harden an MCP Server Before It Becomes a Master Key to Your Infrastructure
AI securityApr 1

How to Harden an MCP Server Before It Becomes a Master Key to Your Infrastructure

21 min read
MCP Security Guide: 24 Checks for AI Agents & MCP Servers
AI securityFeb 11

MCP Security Guide: 24 Checks for AI Agents & MCP Servers

9 min read
OWASP ASI04 Explained: Agentic Supply Chain Attacks
AI securityMay 12

OWASP ASI04 Explained: Agentic Supply Chain Attacks

OWASP Agentic Top 10 · Part 4 of 10
AI Agent Wallet Security: 5 Ways Someone Empties It (and the Fix for Each)
AI securityOct 22

AI Agent Wallet Security: 5 Ways Someone Empties It (and the Fix for Each)

20 min read
OWASP ASI10 Explained: Rogue Agents and Misalignment
AI securityJun 30

OWASP ASI10 Explained: Rogue Agents and Misalignment

OWASP Agentic Top 10 · Part 10 of 10
OWASP ASI08 Explained: Cascading Failures in Agentic Systems
AI securityJun 26

OWASP ASI08 Explained: Cascading Failures in Agentic Systems

OWASP Agentic Top 10 · Part 8 of 10
OWASP ASI07 Explained: Insecure Inter-Agent Communication
AI securityJun 23

OWASP ASI07 Explained: Insecure Inter-Agent Communication

OWASP Agentic Top 10 · Part 7 of 10
OWASP ASI09 Explained: Human-Agent Trust Exploitation
AI securityJun 19

OWASP ASI09 Explained: Human-Agent Trust Exploitation

OWASP Agentic Top 10 · Part 9 of 10
OWASP ASI06 Explained: AI Memory & Context Poisoning
AI securityJun 16

OWASP ASI06 Explained: AI Memory & Context Poisoning

OWASP Agentic Top 10 · Part 6 of 10
OWASP ASI03 Explained: AI Agent Identity & Privilege
AI securityJun 9

OWASP ASI03 Explained: AI Agent Identity & Privilege

OWASP Agentic Top 10 · Part 3 of 10
OWASP ASI01 Explained: AI Agent Goal Hijacking
AI securityJun 2

OWASP ASI01 Explained: AI Agent Goal Hijacking

OWASP Agentic Top 10 · Part 1 of 10
OWASP ASI05 Explained: AI Agent RCE Patterns
AI securityMay 26

OWASP ASI05 Explained: AI Agent RCE Patterns

OWASP Agentic Top 10 · Part 5 of 10
OWASP ASI02 Explained: AI Agent Tool Misuse Attacks
AI securityMay 19

OWASP ASI02 Explained: AI Agent Tool Misuse Attacks

OWASP Agentic Top 10 · Part 2 of 10
Agent Payment Security: 20 Checks Before You Ship
AI securityOct 31

Agent Payment Security: 20 Checks Before You Ship

14 min read
When LLMs Sign Transactions: AI-Driven Smart Contract Threat Model
AI securityJul 10

When LLMs Sign Transactions: AI-Driven Smart Contract Threat Model

15 min read
AI Agents Holding Crypto Wallets: The Security Model
AI securityJul 3

AI Agents Holding Crypto Wallets: The Security Model

15 min read
Agentic DeFi security: when AI agents control treasury, trading, and liquidations
AI securityJun 1

Agentic DeFi security: when AI agents control treasury, trading, and liquidations

21 min read
Long-Lived Agents: Delayed Execution Risk
AI securityMay 27

Long-Lived Agents: Delayed Execution Risk

14 min read
AI Agent Outbound Authority: Audit Checks
AI securityMay 20

AI Agent Outbound Authority: Audit Checks

13 min read
AI Agent Approval Bypass: Audit Checks
AI securityMay 13

AI Agent Approval Bypass: Audit Checks

12 min read
Why AI security needs pentesting, red teaming, and audits together
AI securityApr 7

Why AI security needs pentesting, red teaming, and audits together

20 min read
AI trading bot security: 5 critical attack vectors in DeFi
AI securityMar 30

AI trading bot security: 5 critical attack vectors in DeFi

21 min read
When AI controls DeFi vaults, prompt injection becomes remote code execution
AI securityMar 25

When AI controls DeFi vaults, prompt injection becomes remote code execution

16 min read
Why AI Red Teaming Is No Longer Optional in Today's Security Landscape
AI securityFeb 15

Why AI Red Teaming Is No Longer Optional in Today's Security Landscape

9 min read
Indirect prompt injection: the Web3 agent attack chain
AI securityMay 15

Indirect prompt injection: the Web3 agent attack chain

26 min read