Skip to content
Threat Feed
Subscribe

Product

Grok

2 briefs RSS
medium advisory

GenAI Tool Configuration Poisoning via MCP Server Injection

Adversaries are targeting configuration files of popular GenAI tools to inject malicious Model Context Protocol (MCP) servers, enabling persistence, arbitrary command execution, and data exfiltration.

Cursor +9 defense-evasion persistence genai-security supply-chain
1r 2t
medium advisory

GenAI Process Connection to Unusual Domain on macOS

This rule detects GenAI tools on macOS connecting to unusual domains, potentially indicating command and control activity, data exfiltration, or malicious payload retrieval following compromise via prompt injection, malicious MCP servers, or poisoned plugins.

Copilot +22 genai command and control macos network connection
2r 1t