Alex Vance
MCP Tool Poisoning: How the AI Agent Protocol Became a Supply Chain Attack Surface
The MCP protocol connects AI agents to over 10,000 tools. It also creates a new supply chain attack surface: poisoned tool descriptions that silently hijack agent behavior. Here's the data, the CVEs, and what to do.
Prompt Injection Defense in 2026: What Actually Works When Detection Is Impossible
OpenAI says perfect prompt injection detection is still unsolved. Three academic proofs show why it may never be possible. This is the defense-in-depth architecture that actually works in 2026.
Slopsquatting: When AI Hallucinations Become Supply Chain Attacks
AI coding assistants hallucinate package names 19.7% of the time. Attackers register those names on npm and PyPI before real packages can claim them. Tens of thousands of developers have already installed malicious packages their AI suggested. Here is how the attack works, what the research shows, and how to stop your team from becoming the next victim.