Back Markets.Businessinsider

Token Security Researcher to Present “MCPwned” Vulnerability Research at RSAC™ 2026 ...

Markets.Businessinsider • March 17, 2026

TEL AVIV, Israel and NEW YORK, March 17, 2026 (GLOBE NEWSWIRE) -- Token Security , the leader in identity-first AI agent security, today announced that security researcher Ariel Simon will present new vulnerability research at the RSAC™ 2026 Conference, demonstrating how a remote code execution (RCE) flaw in Microsoft’s Azure Model Context Protocol (MCP) server could enable attackers to compromise cloud environments.

Token Security Token Security accelerates the secure adoption of agentic AI by discovering AI agents across the enterprise, understanding their context and risk, and enforcing policies that govern their access and behavior. The platform provides continuous visibility, lifecycle management, and least-privilege enforcement to help organizations control autonomous AI agents operating across cloud, SaaS, and enterprise environments, eliminating blind spots, reducing risk, and ensuring compliance at scale.

Token Security is backed by Notable Capital, Crosspoint Capital, and TLV Partners. token.security

Media : Marc Gendron Marc Gendron PR for Token Security marc@mgpr.net +1-617-877-7480

A photo accompanying this announcement is available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerability in Azure MCP Servers Uncovered Token Security researcher Ariel Simon will present findings on a remote code execution (RCE) vulnerability in Microsoft’s Azure Model Context Protocol (MCP) server at the RSAC™ 2026 Conference. This flaw allows unauthenticated attackers with network access to compromise Azure tenants, extract credentials, and potentially gain control over Azure and Entra ID environments. The vulnerability arises as MCP becomes a standard interface for large language models (LLMs) interacting with cloud systems. The session aims to raise awareness about the security gaps in cloud environments as adoption of these technologies accelerates. Organizations utilizing Azure services may be at risk if they do not implement adequate security measures. The presentation is scheduled for March 26, 2026, at the Moscone Center in San Francisco. 2 sources 65

Extracted Entities

Token Security Researcher to Present “MCPwned” Vulnerability Research at RSAC™ 2026 ...

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)

Domains (1)

Vulnerabilities (1)