Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

Summary

New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company data to an outsider. The trick is that the agent never breaks a rule. Every step looks routine, so in a default setup no alarm may fire. The work comes from Microsoft Incident Response and its

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.