UNVERIFIEDSingle SourceMCP's new spec turns a planted prompt into a stolen credential - VentureBeatVentureBeat AI|9/5/2026