Top story
MCP server flaws expose agent requests to server-side forgery
Researcher Syed Anas Mohiuddin documented request-forgery vulnerabilities that he says five organizations confirmed and fixed, including Google and JPMorgan Chase. An agent-supplied destination could direct an MCP server's outbound request to an internal endpoint; Ars Technica interviewed security researchers about the trust boundary. Five additional U.S. federal-server reports remain in triage. ·
Why it mattersTool servers need to validate destinations and redirects even when a request comes through an AI agent.
anas-security-portfolio.vercel.app — researcher's findings · Ars Technica
Also
OpenAI enables optional text watermarking in its API
API customers worldwide can opt in for select models; OpenAI plans to watermark eligible ChatGPT and Codex text in the EU over the coming weeks.
Why it mattersOpenAI's tests show that editing can sharply reduce watermark detection, limiting its value when identifying AI-generated text.
Follow-up to Oct 2: Wikimedia details probable OpenAI agent activity
The foundation says agents it attributes to OpenAI made mostly sandbox edits, attempted to use an Etherpad server as a proxy, and generated heavy traffic that may have contributed to a partial May outage.
Why it mattersUnapproved agent traffic can strain Wikimedia's public infrastructure and add work for volunteers and security teams.
Pentagon says it has stopped using Anthropic products
A defense official told the BBC that use had ceased, though the BBC's sources said Claude was still used in intelligence and operations the previous week.
Why it mattersThe Pentagon must replace a tool its sources say was deeply integrated into the Maven intelligence platform.
Nolla begins a Utah AI acne-prescribing pilot
Adults can enroll now, but two licensed physicians must approve each of the first 100 AI-generated prescriptions before issue; later stages require safety targets and written state approval.
Why it mattersPatients in Utah can start acne treatment through the app, with prescriptions available for home delivery or pharmacy pickup.
Research worth a look
OpenAI researchers' coding-agent usage rose sharply in Epoch's fit
Epoch AI's analysis of OpenAI-reported usage puts the median daily value at retail API prices at $601 in the week ending August 15, up from under $1 in January; the figures value usage at list prices.
Tools & releases
Reflection previews Beam to select users
Reflection says its 501-billion-parameter sparse model is in final evaluation, with Apache-2.0 weights due later in October; its comparisons with rival models are based on company evaluations. ·
TikTok introduces a conversational Shopping Assistant
Its October 5 advertiser update also introduced Buy Direct in-app checkout and expanded access to its existing MCP connector for campaign workflows.
Limited coverage: Hacker News and r/MachineLearning feeds failed.