Official MCPS are at risk to Willison's lethal trifecta attack

Comments (1)

coderinsan · 4h ago

Hey HN we’ve been collecting lethal trifecta based attack scenarios on official MCPs and implementing guardrails against them for a while now. It's incredible to see how many of the official MCPs are susceptible to these attacks. With ChatGPT’s integrated MCP support lethal trifecta attacks have become much more relevant.

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised (stepsecurity.io)

How to make the Framework Desktop run even quieter (noctua.at)

Things you can do with a Software Defined Radio (2024) (blinry.org)

Denmark close to wiping out cancer-causing HPV strains after vaccine roll-out (gavi.org)

Waymo has received our pilot permit allowing for commercial operations at SFO (waymo.com)

In Defense of C++ (dayvster.com)

Meta RayBan AR Glasses Shows Lumus Waveguide Structures in Leaked Video (kguttag.com)

How Container Filesystem Works: Building a Docker-Like Container from Scratch (labs.iximiuz.com)

A Dumb Introduction to z3 using Rust (asibahi.github.io)

I built my own phone because innovation is sad rn [video] (youtube.com)

Launch HN: Rowboat (YC S24) – Open-source IDE for multi-agent systems (github.com)

Should We Drain the Everglades? (rabbitcavern.substack.com)

Wind turbine blade transportation challenges (spectrum.ieee.org)

Plugin System (iina.io)

A new experimental Google app for Windows (blog.google)

Scammed out of $130K via fake Google call, spoofed Google email and auth sync (bewildered.substack.com)

When the job search becomes impossible (jeffwofford.com)

Soviet Maps (xcancel.com)

Top UN legal investigators conclude Israel is guilty of genocide in Gaza (middleeasteye.net)

SQL performance improvements: finding the right queries to fix (ohdear.app)

UTF-8 history (2003) (doc.cat-v.org)

The Linux Process Journey (2023) [pdf] (thelearningjourneyebooks.com)

CIA Freedom of Information Act Electronic Reading Room (cia.gov)

Bertrand Russell to Oswald Mosley (1962) (lettersofnote.com)

Writing an operating system kernel from scratch – RISC-V/OpenSBI/Zig (popovicu.com)

Implicit ODE solvers are not universally more robust than explicit ODE solvers (stochasticlifestyle.com)

Development of the MOS Technology 6502: A Historical Perspective (2022) (embeddedrelated.com)

Paper Folding Assembly Line [video] (youtube.com)

Adios Chicos, 25 Years of KDE (jriddell.org)

60 years after Gemini, newly processed images reveal details (arstechnica.com)

Generative AI as Seniority-Biased Technological Change (papers.ssrn.com)

Microsoft Favors Anthropic over OpenAI for Visual Studio Code (theverge.com)

Ontario Canada Study Shows Wind, Solar, Batteries Competing with Gas and Nuclear (theenergymix.com)

The "Most Hated" CSS Feature: Cos() and Sin() (css-tricks.com)

Java 25 officially released (mail.openjdk.org)

Teen safety, freedom, and privacy (openai.com)

Scientists uncover extreme life inside the Arctic ice (news.stanford.edu)

Migrating to React Native's new architecture (shopify.engineering)

"Your" vs. "My" in user interfaces (adamsilver.io)

Learn x86-64 assembly by writing a GUI from scratch (2023) (gaultier.github.io)

Will I run Boston 2026? (getfast.ai)

Robert Redford has died (nytimes.com)

Oracle, Silver Lake consortium to control 80% stake in TikTok in US (reuters.com)

Credit scores drop at fastest pace since the Great Recession (cnn.com)

Hosting a website on a disposable vape (bogdanthegeek.github.io)

Europe is locking itself in to US LNG (davekeating.substack.com)

Threads is the gas-leak social network (maxread.substack.com)

Criminals broke into the system Google uses to share info with cops (theregister.com)

Alex Karp Insists Palantir Doesn't Spy on Americans. Here's What He's Not Saying (theintercept.com)

Google's Gemini tops Apple's App Store, snagging lead spot from ChatGPT (cnbc.com)

Official MCPS are at risk to Willison's lethal trifecta attack

Comments (1)