{"data":{"id":"11d20577-2569-4d93-80db-7df788e577a9","title":"Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data","summary":"Microsoft researchers discovered that attackers can poison tool descriptions in MCP (Model Context Protocol, an open system that lets AI agents call outside tools) to trick AI agents into leaking company data without breaking any rules. The attack works by hiding malicious instructions inside the plain-text description of a tool, so when an agent reads the description to decide what to do, it follows the hidden orders along with legitimate ones, making the data theft look like normal activity.","solution":"Microsoft recommends: (1) Treat every connected tool as part of your supply chain and keep a list of approved tool publishers, turning off \"allow all\" and letting an agent use only specific tools it needs. (2) Treat a tool's description like a system prompt by reviewing changes to it the way you would review a code change and scanning the text for commands that have no business sitting in a help field. (3) Put a human in front of risky actions, particularly anything that moves money or shares data.","labels":["security","safety"],"sourceUrl":"https://thehackernews.com/2026/06/microsoft-warns-poisoned-mcp-tool.html","publishedAt":"2026-06-30T17:46:07.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft 365 Copilot","Copilot Studio","Azure AI Foundry","Model Context Protocol (MCP)"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-06-30T17:46:07.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}