October 6, 2026
An agent mistakes an attacker's command for a colleague's request: a researcher traces an MCP chain

With MCP and A2A combined, an attacker can pass a command through one AI agent to another that trusts the sender.
Documentation
Journal
Frontend
Backend
Admin
CI/CD
Loading the page.
Loading the page.
October 6, 2026

With MCP and A2A combined, an attacker can pass a command through one AI agent to another that trusts the sender.
who it's about
about the same entities
Release
Gemini CLI runs plans without user interaction: v0.63.0 adds autonomous executionOctober 6
Release
Claude Code's recurring background tasks survive restarts: Anthropic fixes /loop bugOctober 6
Release
Claude Code restores /loop tasks after conversation compaction: a fix in version 2.1.290October 6
Insight
AI agent teams change with each model: lessons from the Codex leadOctober 5
Insight
Granola notes without opening the app: an AI agent retrieves them through MCPOctober 5
One email a week - only what changes how you work. Subscribe