Tagged:

3 posts

• Tool Poisoning via Malicious MCP Servers: When Your Agent's Tools Turn Against It

  MCP servers are the extension layer for modern AI agents — granting file access, web search, code execution, and API calls. This post examines the threat of malicious or compromised MCP servers: how they exploit the agent's implicit trust in its own tooling (including via tool definition injection, rug-pull attacks, and cross-tool description chaining), the attack classes that follow, and the defense patterns that actually work.

  Jun 29, 2026 mcp-security tool-use agent-security supply-chain threat-modeling defense-patterns prompt-injection agentic-ai ai-security supply-chain-security

• MCP Security: The New Attack Surface for AI Tool Protocols

  MCP is to AI agents what HTTP is to browsers — and it has the same early-web security baggage. Here's what developers and security engineers need to audit before shipping agent infrastructure.

  Jun 26, 2026 mcp-security prompt-injection agent-security tool-use threat-modeling

• Three Papers, Three Attack Layers: Agent Security Gets Mapped

  In one week, three independent research groups dissected the conversation, tool-use, and capability layers of AI agent systems. Here's what practitioners need to know.

  Apr 26, 2026 threat-modeling prompt-injection mcp-security tool-use agent-security