MCP’s trust gap lets one agent spread malicious instructions
What changed · following since Oct 6 Oct 7 — OX Security found no marketplace vetting across 15,465 public MCP servers, including expired domains and hosts routed through consumer tunnels.
MCP is exposing a structural trust boundary between connected agents: a
Built from 3 signals across 3 sources · 185 items reviewed