Official Azure MCP exploited to steal users Keyvaults secrets

Comments (1)

rvz · 2d ago

Tramlines.io presents: Another day, another official MCP server exploited. Again.

Why on earth does Azure need an MCP server? MCPs do not belong anywhere near a critical system responsible for storing sensitive secrets or env vars.

Now the official Azure MCP server can be breach with all your key-vault secrets exfiltrated.

I think this tells you that "MCP" is rising to becoming the worst protocol standard that has ever been designed.

And once again, no-one cares. (they really should)

Bill Atkinson's Psychedelic User Interface (patternproject.substack.com)

OpenFront: Realtime Risk-like multiplayer game in the browser (openfront.io)

FP8 is ~100 tflops faster when the kernel name has "cutlass" in it (twitter.com)

Apple vs the Law (formularsumo.co.uk)

Show HN: Pangolin – Open source alternative to Cloudflare Tunnels (github.com)

Postgres LISTEN/NOTIFY does not scale (recall.ai)

The day someone created 184 billion Bitcoin (2020) (decrypt.co)

LLM Inference Handbook (bentoml.com)

Batch Mode in the Gemini API: Process More for Less (developers.googleblog.com)

The ChompSaw: A Benchtop Power Tool That's Safe for Kids to Use (core77.com)

At Amazon's Biggest Data Center, Everything Is Supersized for A.I (nytimes.com)

Show HN: Interactive pinout for the Raspberry Pi Pico 2 (pico2.pinout.xyz)

What is Realtalk’s relationship to AI? (2024) (dynamicland.org)

Flix – A powerful effect-oriented programming language (flix.dev)

Series of posts on HTTP status codes (2018) (evertpot.com)

Show HN: Cactus – Ollama for Smartphones (github.com)

FOKS: Federated Open Key Service (foks.pub)

Underwater turbine spinning for 6 years off Scotland's coast is a breakthrough (apnews.com)

Graphical Linear Algebra (graphicallinearalgebra.net)

Btrfs Allocator Hints (lwn.net)

The Wet History of Media in the Bathroom (thereader.mitpress.mit.edu)

Red Hat Technical Writing Style Guide (stylepedia.net)

Operational Apple-1 Computer for sale [video] (youtube.com)

Show HN: I built a playground to showcase what Flux Kontext is good at (fluxkontextlab.com)

Show HN: Open source alternative to Perplexity Comet (browseros.com)

Grok: Searching X for "From:Elonmusk (Israel or Palestine or Hamas or Gaza)" (simonwillison.net)

Orwell Diaries 1938-1942 (orwelldiaries.wordpress.com)

Analyzing database trends through 1.8M Hacker News headlines (camelai.com)

Diffsitter – A Tree-sitter based AST difftool to get meaningful semantic diffs (github.com)

AI coding tools can reduce productivity (secondthoughts.ai)

Launch HN: Leaping (YC W25) – Self-Improving Voice AI

Measuring the impact of AI on experienced open-source developer productivity (metr.org)

eBPF: Connecting with Container Runtimes (h0x0er.github.io)

Million Times Million (susam.net)

Grok 4 (simonwillison.net)

Foundations of Search: A Perspective from Computer Science (2012) [pdf] (staffdcs.shef.ac.uk)

Regarding Prollyferation: Followup to "People Keep Inventing Prolly Trees" (dolthub.com)

Is Gemini 2.5 good at bounding boxes? (simedw.com)

Reverse Engineering the Firmware Loader for an X-Rite Spectrophotometer (adam.zeloof.xyz)

Belkin ending support for older Wemo products (belkin.com)

The death of partying in the USA (derekthompson.org)

Yamlfmt: An extensible command line tool or library to format YAML files (github.com)

Bootstrapping a side project into a profitable seven-figure business (projectionlab.com)

Bear-Sized Giant Beavers Once Roamed North America (smithsonianmag.com)

Mini robots detect and fix water pipe leaks without digging (foxnews.com)

Researchers create 3D interactive digital room from simple video (news.cornell.edu)

Xenharmlib: A music theory library that supports non-western harmonic systems (xenharmlib.readthedocs.io)

3I/ATLAS: Interstellar object 'may be oldest comet ever seen' (phys.org)

Non-Concussive Head Impacts and Brain Microstructure, Chemistry and Function (sportsmedicine-open.springeropen.com)

Show HN: CXXStateTree – A modern C++ library for hierarchical state machines (github.com)

Official Azure MCP exploited to steal users Keyvaults secrets

Comments (1)