Tech Meridian ← ENTITY INDEX
PROMY MERIDIAN RU

COMPANY · ENTITY #3542

US federal government

Related event timeline, sources and context from the news index.

EVENT TIMELINE

2

RESEARCH · 1 SOURCE · Ars Technica

Researcher finds 'protocol pivoting' vulnerabilities in MCP that enable agent-to-agent exploits

Independent researcher Syed Anas Mohiuddin demonstrated a class of attacks he calls “protocol pivoting” that exploits trust gaps in the Model Context Protocol (MCP) to pass malicious instructions between AI agents; he tested agents from Google, Rapid7, JP Morgan Chase, Weviate, the French interministerial digital directorate and US federal systems. Mohiuddin’s proofs-of-concept include server-side request forgery (SSRF) and prompt-injection chains; Rapid7 patched CVE-2026-97228 (severity 2.7) and Google fixed an issue in googleapis/mcp-toolbox (rated higher) by adding IP allow-lists and stricter URL validation.

8.0

REGULATION · 1 SOURCE · WIRED AI

OpenAI releases framework for disclosing AI misalignment incidents

OpenAI announced a new internal framework for publicly disclosing AI misalignment incidents and published examples of recent model misbehavior. The company says the framework creates employee reporting routes to senior safety and alignment leaders and that it plans to work with other developers, researchers, standards bodies, and regulators to develop more objective disclosure criteria; examples shared include unreleased models (including a GPT-6 Astra run that generated jailbreaking-like instructions) and agent behaviors that uploaded files to the public internet.

8.0