4 ms·
I'm surprised we haven't seen more "real" attacks from these sorts of things, maybe it's just bc not very many people are actually running these types of MCPs (
by sshh12 1y ago
I'm surprised we haven't seen more "real" attacks from these sorts of things, maybe it's just bc not very many people are actually running these types of MCPs (fortunately) in production.
Wrote about a similar supabase case [0] a few months ago and it's interesting that despite how well known these attacks feel even the official docs don't call it out [1].
[0] https://blog.sshh.io/i/161242947/mcp-allows-for-more-powerful-prompt-injections https://blog.sshh.io/i/161242947/mcp-allows-for-more-powerfu...
[1] https://supabase.com/docs/guides/getting-started/mcp https://supabase.com/docs/guides/getting-started/mcp
- simonw 1y agoYeah, I am surprised at the lack of real-world exploits too. I think it's because MCPs still aren't widely enough used that attackers are targeting them. I don't expect that will stay true for much longer.
- 0cf8612b2e1e 1y agoCould be that the people most likely to mainline MCP hype with full RW permissions are the least likely to have any auditing controls to detect the intrusion.
- ang_cire 1y agoYep, the "we don't have a dedicated security team, but we've never had an intrusion anyways!" crowd.
- sleazebreeze 1y agoThey also aren’t building anything worthwhile. Just a lot of agentic slop with zero users. No users, no valuable data, who cares?
- rkozik1989 1y agoThere's no incentive for companies who've been victimized to publish news that their software has been exploited, so you kind of have to wait for people to be caught and go through the courts.