Why 14 MCP CVEs trace back to one design choice
OX Security's April 2026 advisory traces 14 MCP CVEs and 200,000 exposed servers to a single design choice: STDIO as the default local transport.
MCP Server
Page 4 of 9
OX Security's April 2026 advisory traces 14 MCP CVEs and 200,000 exposed servers to a single design choice: STDIO as the default local transport.
MCP Server
Anthropic's 2026 trilogy on context engineering, tools, and code execution with MCP each assume the same missing layer: the substrate where context lives.
Context Engineering
An MSR 2026 study of 466 open source projects maps the five modes developers use to write AGENTS.md context, and what 50% file staleness reveals about practice.
Context Engineering
Memory consolidation fixes one specific failure: agents writing the same claim dozens of times into a flat scratchpad. When it helps and where it breaks.
Context Engineering
A 26M-parameter model just matched Gemini at function calling. Here is what Needle's distillation result means for MCP and agent context engineering.
MCP (Model Context Protocol)
Every MCP discussion is about tools. The protocol's resources primitive is how you load context without paying for it every turn. Here's how to use it.
MCP (Model Context Protocol)
ACE (ICLR 2026) beats tuned prompts by 10.6% with self-evolving contexts that avoid brevity bias and context collapse, two real failures of prompt tuning.
Context Engineering
Codex shipped codex-plugin-cc and AGENTS.md joined the Linux Foundation. The signal is consistent: context engineering is substrate work, not harness work.
Context Engineering
A 172-billion-token study across 35 open models found hallucination rates triple from 32K to 128K context, and exceed 10% at 200K for every model tested.
AI Hallucination
Preloading every MCP tool into an agent's context is the bottleneck of 2026. Progressive tool loading defers definitions until needed and saves tokens.
MCP (Model Context Protocol)