<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Tool Poisoning on Vivian@SecMomBag</title><link>https://vvnblog.com/en/tags/tool-poisoning/</link><description>Recent content in Tool Poisoning on Vivian@SecMomBag</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>Copyright © 2026 Vivian All Rights Reserved.</copyright><lastBuildDate>Sat, 05 Sep 2026 00:00:00 +0800</lastBuildDate><atom:link href="https://vvnblog.com/en/tags/tool-poisoning/index.xml" rel="self" type="application/rss+xml"/><item><title>AI Dark Arts (17): The Tool Definition Is More Dangerous Than the Tool</title><link>https://vvnblog.com/en/posts/ai-dark-arts-17/</link><pubDate>Sat, 05 Sep 2026 00:00:00 +0800</pubDate><guid>https://vvnblog.com/en/posts/ai-dark-arts-17/</guid><description>A tool description nobody reads closely is enough to make an AI hand database tokens to an attacker. Four ways MCP tool poisoning works, and where to stop it when you bring MCP in.</description></item></channel></rss>