Microsoft warns MCP tool poisoning can turn AI agents into silent data thieves
Microsoft details an MCP tool‑poisoning attack that lets adversaries hijack Copilot‑style agents to silently hand over corporate data, then offers a playbook using built‑in Microsoft controls to detect and block the abuse. As AI agents shift from reading to acting, the threat surface expands dramatically, making tool metadata a critical new attack vector.