Self-hosting the Remote MCP server reduces exposure to external systems but increases internal responsibilities. “Though running in-house developer environments reduces external risk,” Naik said.

Two updates pushed to the PHP Git server over the weekend added a line that, if run by a PHP-powered website, would have allowed visitors with no authorization to execute code of their choice.

Microsoft AI researchers accidentally exposed tens of terabytes of sensitive data, including private keys and passwords, while publishing a storage bucket of open source training data on GitHub.