Source: Ars Technica - All content
The Model Context Protocol (MCP)—designed to let AI agents talk to each other and external tools—is being deployed widely without security vetting, creating a novel attack vector that resembles early internet infrastructure vulnerabilities. Unlike traditional software with mature security practices, agent-to-agent communication lacks established defensive patterns, meaning attackers can potentially hijack agents to perform financial transfers, access confidential data, or manipulate business processes at scale. Enterprise AI adoption is outpacing security governance, turning what should be a deliberate infrastructure decision into a deployment checklist item.