stepan_
Re:MCP vulnerabilities increased by 270% from Q2 to Q3
on Friday October 31, 2025 @11:49AM (#45773426)
Some other data:
The OWASP Business Logic Abuse Top 10, released this year, formalizes this growing class of attacks. And with 82% of businesses now describing themselves as API-first, the logic layer has become a lucrative new target.
Security Misconfiguration (API8) once again topped the list with 605 cases, up 33% quarter over quarter.
Broken Authorization (API5, API1) accounted for roughly 28% of all API vulnerabilities.
Broken Authentication (API2) climbed sharply, driven by weak credential enforcement in REST and SOAP APIs.
MCP vulnerabilities increased by 270% from Q2 to Q3
Analyzing DeepSeek's System Prompt: Jailbreaking Generative AI
What you need to know about The MOVEit and its impact. Latest
Re:Show HN: Sidekick – the fastest browser built for work
on Monday November 30, 2020 @04:15PM (#25259080)
Like the idea of the Spotlight across all the services. Does it index any data for the quick search?
Socket.io zero-day exploited in the wild (CVE-2020-24807)
Re:Show HN: Happy engineering jobs. Teams. Culture. Advanced filters
on Wednesday April 08, 2020 @03:28PM (#22816154)
Congrats with the launch!
Re:Waymo releases open dataset challenges
on Thursday March 19, 2020 @03:59PM (#22631051)
I was pretty impressed when you shared your datasets with the community. Glad you're launching these virtual challenges now!