https://vvnblog.com/en/tags/mcp/Recent content in MCP on Vivian@SecMomBagHugo -- gohugo.ioenCopyright © 2026 Vivian All Rights Reserved.Sun, 06 Sep 2026 00:00:00 +0800https://vvnblog.com/en/posts/ai-dark-arts-18/Sun, 06 Sep 2026 00:00:00 +0800https://vvnblog.com/en/posts/ai-dark-arts-18/Does approving a config file once mean trusting it forever? From MCPoison and CurXecute to mcp-remote and MCP Inspector, this is how the client side of MCP gets attacked.https://vvnblog.com/en/posts/ai-dark-arts-17/Sat, 05 Sep 2026 00:00:00 +0800https://vvnblog.com/en/posts/ai-dark-arts-17/A tool description nobody reads closely is enough to make an AI hand database tokens to an attacker. Four ways MCP tool poisoning works, and where to stop it when you bring MCP in.https://vvnblog.com/en/posts/ai-dark-arts-16/Mon, 17 Aug 2026 00:00:00 +0800https://vvnblog.com/en/posts/ai-dark-arts-16/Three roles in Host, Client and Server, three capabilities in tools, resources and prompts. Understand how MCP works and you can see which part the risk arrives through.