Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Researchers at ASSET Research Group have disclosed a new attack technique, dubbed GhostSplice, that exploits the Model Context Protocol (MCP) to trick…
Tag: GPT-4o
Open-Source Android AI Agents Vulnerable to Invisible Screen Text Attacks Leading to Host Code Execution
Researchers have demonstrated that open-source Android AI agent frameworks are vulnerable to a novel attack chain where invisible screen text can lead…
GPT-4o Vulnerable to GhostSplice in API Tests
In ASSET Research Group's tests, GPT-4o showed 0% compliance in a one-piece instruction test but 100% when instructions were split into two…