SSRF Attack — When the Server Becomes the Attacker | CAISD

<blockquote> <p>No credentials. No malware. No special access.<br /><br /> Just a URL input — and a server with the wrong trust model.</p> </blockquote> <p>This is how Capital One

<h1> MCP Security Vulnerabilities in 2026: What Every Agent Developer Must Know </h1> <p>The Model Context Protocol (MCP) has become the universal "USB-C port for AI applications"

<p>On March 24, 2026, attackers published backdoored versions of LiteLLM to PyPI. The malware harvested cloud credentials, SSH keys, Kubernetes tokens, and pretty much everything