First reported arxiv.org
Research · latest
First reported arxiv.org
ShareLock: A Stealthy Multi-Tool Threshold Poisoning Attack Against MCP
ShareLock is a research framework that performs a stealthy multi-tool threshold poisoning attack against the Model Context Protocol (MCP), using Shamir's secret-sharing scheme to distribute a malicious instruction as benign-looking shares across multiple tool descriptions that reconstruct into a hidden instruction only after a covert trigger is planted during a server update. Experiments across mainstream LLMs and two MCP clients report an average attack success rate exceeding 90% while evading tool-description-based detectors. Details →First reported acm.org
Confused Deputy Attack Against Model Context Protocol
An ACM TOSEM paper uncovers the "confused deputy attack" against the Model Context Protocol (MCP), where an adversarial server with subtly manipulated metadata overshadows a benign server and intercepts tool invocations without overt malicious behavior. The authors built Puppet, an automated evaluation framework that rewrites benign tool descriptions to hijack tool selection, achieving hijacking rates up to 90.89% and payload execution up to 86.46% across 14 models, while evading MCP-Scan and McpSafetyScanner which cannot detect metadata-level manipulation. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector