Vibe-Coded and Vulnerable: What the METR API Key Theft Teaches Healthcare AI Security Teams
METR lost $600K in AI credits to an attacker who found their vibe-coded dashboard via certificate transparency logs. The...
Read MoreAuthentication
9 articles
MCP's Agent Identity Problem: What the Official Roadmap Tells Healthcare Security Teams
The MCP roadmap openly admits the current auth model wasn't built for agentic workloads — pasted API keys and long-lived...
Read MoreZero Risk Isn't the Job: What Anthropic's CISO Framework Means for Healthcare Security Programs
Anthropic's Deputy CISO shares the four-question framework his team uses to evaluate every agentic AI use case — plus a ...
Read MoreMCP Goes Stateless on July 28: What the New Spec Means for Healthcare Security Programs
The MCP protocol ships its largest revision since launch on July 28. The stateless core is the headline, but the authori...
Read MoreAnthropic Formalizes Biometric Identity Verification for Claude Consumer Users — What Healthcare Organizations Need to Know
Anthropic's July 8 privacy policy update makes it the first major US frontier AI lab to formally codify biometric identi...
Read MoreAnthropic's Cyber Verification Program in Practice: From Approval to Real Defensive Work
Anthropic's CVP approved in one business day. Here's what the classifier actually unlocks, how Sonnet 5 and Opus 4.8 com...
Read MoreMCP Gets Its Enterprise Authorization Layer — What the EMA Extension Means for Healthcare AI Governance
The MCP Enterprise-Managed Authorization extension is now stable, with Anthropic, Microsoft, and Okta among the first ad...
Read MoreKali365 PhaaS Kit Hijacks Microsoft 365 OAuth Tokens and Bypasses MFA — What Healthcare Security Teams Need to Do Now
The FBI is warning organizations about Kali365, a $250 phishing-as-a-service kit that captures Microsoft 365 OAuth token...
Read MoreMeta's Instagram AI Vulnerability Fix Was Incomplete: Accounts Still Being Compromised
Users report continued Instagram account compromises hours after Meta claimed the AI chatbot vulnerability was fixed. Se...
Read More