MCP security
2 posts
Article
MCP is an attack surface, not a feature
MCP puts data and control in one channel and runs the model's tool calls with the user's full authority. Why the design fails, from the attacker's view.
Article
Willison's lethal trifecta exfiltrates Claude uploads
Technical analysis of indirect prompt injection against Claude AI agents - exfiltration mechanics, ATT&CK mapping, telemetry gaps, residual exposure.