
A Practical Guide to MCP Security
The Model Context Protocol (MCP) connects AI agents to your data. Learn how to secure MCP servers against tool poisoning, token misuse, and prompt injection with this practical guide based on OWASP standards.
Topic
Every article tagged Tool Poisoning, newest first.
Related topics

The Model Context Protocol (MCP) connects AI agents to your data. Learn how to secure MCP servers against tool poisoning, token misuse, and prompt injection with this practical guide based on OWASP standards.

Master MCP security threats: RCE, injection attacks, malicious dependencies & data poisoning. Complete defense-in-depth guide for securing AI agents and preventing supply chain attacks.

Your AI strategy's biggest blind spot is the Machine Control Plane (MCP). Learn about critical threats like Tool Poisoning and how specialized MCP vulnerability scanning is essential for security.
Keep reading

Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.

Google Cloud VPC Service Controls now supports folder-level perimeters, folder and organization rules, PSC endpoints, service patterns, and guided violation remediation. Here are the technical details and YAML configs.