Hundreds of accounts were compromised and used to pull sensitive data on millions of peope.

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...