What if your AI assistant could be turned against you by an email you never read? In 2024, Anthropic released the Model Context Protocol - a universal standard for connecting AI assistants to email, code repositories, databases, and cloud infrastructure. Within months, researchers began finding something alarming: AI agents with this kind of access could be hijacked by hidden instructions embedded in the very content they were asked to process. No stolen credentials. No exploit code. Just words that the AI read and obeyed. This episode explores the emerging security frontier of AI agents and MCP servers - the real CVEs, the documented incidents, and why the security community is paying very close attention.

Support the show