Official Azure MCP exploited to steal users Keyvaults secrets

Comments (1)

rvz · 22d ago

Tramlines.io presents: Another day, another official MCP server exploited. Again.

Why on earth does Azure need an MCP server? MCPs do not belong anywhere near a critical system responsible for storing sensitive secrets or env vars.

Now the official Azure MCP server can be breach with all your key-vault secrets exfiltrated.

I think this tells you that "MCP" is rising to becoming the worst protocol standard that has ever been designed.

And once again, no-one cares. (they really should)

AI Researchers Are Negotiating $250M Pay Packages. Just Like NBA Stars (nytimes.com)

How much cash is the US raising from tariffs? (bbc.com)

What's a Potato? A Nine-Million-Year-Old Tomato (nytimes.com)

Oregon mandated phone-free schools – some parents are being asked to pay (oregonlive.com)

Samsung TV service down: Users say apps not loading amid widespread outage (hindustantimes.com)

Decoding the Chinese Computer (sixthtone.com)

Facebook Once Bought a VPN App and Used It to Spy on 33M+ Phones for Years (twitter.com)

Blame the governor! Oklahoma’s “board meeting porn” scandal goes gonzo (arstechnica.com)

Show HN: MitiFresh – A marketplace for homegrown backyard produce

Matlab Copilot: AI assistant optimized for Matlab (mathworks.com)

Elon Musk gives millions to Republican super PACs ahead of the midterms (nbcnews.com)

Construction on Trump's $200M White House ballroom to begin in September (cnn.com)

Peacock feathers can emit laser beams (arstechnica.com)

Further Performance Evolution in Python 3.14: Tail Call Interpreter (manjusaka.blog)

Two Driverless Waymo Cars Collide at Phoenix Sky Harbor Airport (teslarati.com)

Show HN: Kali Linux-like environment written in Windows Batch (github.com)

Show HN: Dingo 1.9.0 released: With enhanced hallucination detection (github.com)

Are Cyber Defenders Winning? – Lawfare (lawfaremedia.org)

The Impossible Quiz (en.wikipedia.org)

LLM leaderboard – Comparing models from OpenAI, Google, DeepSeek and others (artificialanalysis.ai)

IceBear: A Fine-Grained Incremental Scheduler for C/C++ Static Analyzers (doi.org)

Has any YC founder ever gone to jail for startup-related crimes?

Improvised Star Trek: Podcast and Stage Show (2019) (theimprovisedstartrek.com)

Cloud Optimized GeoTIFF: Imagery format for cloud-native geospatial processing (cogeo.org)

Waymo car crashed into another Waymo car (twitter.com)

China's summons Nvidia to explain H20 chip's 'back-door' risks (scmp.com)

Show HN: SonicInfra, Cloud at On-Prem Prices (sonicinfra.com)

Show HN: KubeForge – A GUI for Kubernetes YAMLs (github.com)

Show HN: I vibe coded a word game as a game designer (no ads, just fun) (wordsdescrambler.com)

Anyone else have Claude accounts banned for ToS breach with no warning? (reddit.com)

Shape memory alloys for cryogenic actuators (nature.com)

Rove Founders Arhan Chhabra and Max Morganroth (thefinancefrontier.substack.com)

Why Gen Zers Are Ditching Instagram for BeReal and Snapchat (thefinancefrontier.substack.com)

TraceRoot: Find the Root Cause in Your Code's Trace (github.com)

Show HN: Visual AI x RAG – Search, tag and edit photos with AI (coreviz.io)

A rtt log view tool (makerinchina.cn)

Wide Research (manus.im)

TikTok made songs shrink, but artists are pushing back (bbc.co.uk)

Can you tell if that song AI-generated? (apnews.com)

Figma's stock soared in its highly anticipated IPO,market cap instantly hit $45B (techcrunch.com)

Google loses on appeal In re: Google Play Store Antitrust LItigation [pdf] (cdn.ca9.uscourts.gov)

Britain Is Losing Its Free Speech, and America Could Be Next (currentaffairs.org)

Fair Access to Banking (usips.org)

Why Does the Universe Exist? CERN Just Found a Clue (nature.com)

What do you get out of the StackOverflow Dev Survey Results? (survey.stackoverflow.co)

Thinking Is Becoming a Luxury Good (nytimes.com)

Show HN: A JSON MCP that doesn't clutter your LLM context (github.com)

Why do right-wing figures name their companies after Lord of the Rings? (crikey.com.au)

Samsung smart TV outage prevents access to third party apps (downdetector.com)

We Asked 100 AI Models to Write Code (veracode.com)

Official Azure MCP exploited to steal users Keyvaults secrets

Comments (1)