PT-2026-134437

THE AGENT NEVER NOTICED THE BACKEND MOVED: TWO MISSING CHECKS IN DATALAYER'S JUPYTER-MCP-SERVER LET ANY WEBSITE HIJACK AN AI ASSISTANT'S LIVE NOTEBOOK CONNECTION — AND A FRONTIER MODEL AT HIGH REASONING EFFORT NEVER SAW THE SWAP SCOPE FIRST. Pluto Security's research disclosure read at source thi...

PT-2026-134436

THE AGENT NEVER NOTICED THE BACKEND MOVED: TWO MISSING CHECKS IN DATALAYER'S JUPYTER-MCP-SERVER LET ANY WEBSITE HIJACK AN AI ASSISTANT'S LIVE NOTEBOOK CONNECTION — AND A FRONTIER MODEL AT HIGH REASONING EFFORT NEVER SAW THE SWAP SCOPE FIRST. Pluto Security's research disclosure read at source thi...