Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...
DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.