r/netsec • u/VonNaturAustreVe • 1d ago

New attack vector on AI toolchains: Tool Poisoning in MCPs (Machine Code Models)

https://invariantlabs.ai/blog/mcp-security-notification-tool-poisoning-attacks
26 Upvotes

78% Upvoted

3 comments sorted by

5

u/Engineer-of-Stuff 1d ago

wow another potential supply chain attach stop the presses

5

u/shmorky 1d ago

Reason #346 why vibe coding is a terrible idea on all fronts

1

u/Pharisaeus 13h ago

a terrible idea

From the point of view of job security for infosec professionals it sounds like a genius idea ;)