Both topics covered agentic/emerging AI risk only in general terms and
predated the current MCP incident record. Adds:
- agentic-ai-security: confused-deputy tool-credential forwarding and the
Invariant Labs GitHub MCP prompt-injection/exfiltration disclosure, plus
a link to the MCP spec's own authorization requirements.
- emerging-threats: the April 2026 OX Security disclosure of an RCE flaw
across the official MCP SDKs (Python/TS/Java/Rust), affecting an
estimated 200,000 deployed servers - a concrete, dated example of the
shared-tooling-layer risk class the topic already gestures at.
Existing content and links kept as-is; new paragraph sentences and links
appended.
Co-authored-by: Ahmed Hassan <ahmed.alaa.hassan25@gmail.com>
