https://bowshock.space/blog/ Bowshock blog 2026-10-27T00:00:00.000Z https://bowshock.space/favicon.svg https://bowshock.space/blog/three-day-attack-on-our-mcp-connector Someone spent three days trying to steal our AWS credentials. We didn't notice until it was over. 2026-10-27T00:00:00.000Z 2026-10-27T00:00:00.000Z Andrew Naeve One attacker spent three days probing our MCP connector with SSRF, cross-tenant reads and forged JWTs. Every attempt was denied. Here is what they tried.