AI WIRE//LIVE FROM THE FLOOR

MCP Protocol Flaw Puts 200K Servers at Risk
OX Security publishes 10 CVEs and names Anthropic's STDIO default an architectural RCE vector across 150M downloads of tools including Cursor, Windsurf, LiteLLM, Claude Code.
CVSS 9.8 RCE Lands in SGLang Inference
A malicious GGUF file with a Jinja2 SSTI payload hits the /v1/rerank endpoint and owns the inference server.

Vercel Names Attackers Sophisticated, AI-Accelerated
Apr 20 bulletin adds CEO Rauch's quote that the intruders moved 'significantly accelerated by AI' — making Vercel the first breach victim to publicly name AI-assisted operational…

Anthropic Ships Claude Opus 4.7
Anthropic retakes the publicly-available lead with 87.6% SWE-bench Verified — a double-digit jump over 4.6 — while openly conceding its internal Mythos is stronger.