In partnership with
A security team spent five months quietly hacking some of the biggest names in AI. They broke into the production servers of six real companies with real paying customers. Took over thousands of servers across 200+ popular open-source projects on GitHub. Uploaded fake malware to 9 out of 11 app stores that developers use to install AI tools, and nobody caught it.
Then they traced all of it back to one place. Anthropic's code.
They told Anthropic. Anthropic said two words.
By design.
OX Security published the full research a few days ago. They called it "The Mother of All AI Supply Chains." And those two words.. by design.. is important.
Because this isn't a hacker finding a bug. It's a hacker finding a door. A door that was put there on purpose, left unlocked on purpose, and the builder saying it's working exactly as intended.
So what is MCP?
MCP stands for Model Context Protocol. Anthropic built it in November 2024. And the idea behind it was genuinely good.
LLMs are powerful but trapped. They can't talk to your databases, your files, your APIs on their own. Every developer was writing custom code for every integration. It was hectic.
MCP was Anthropic's answer. One universal protocol. Plug and play. Write the connector once, use it everywhere.
