The Hacker News September 29, 2026

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

More like this

SpaceXAI backs Omarchy, the controversial Linux distro, with $1.5 million in compute

The Verge

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

The Hacker News

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

The Hacker News