MCP Security: The Exploit Playbook (And How to Stop Them)

MLOps.community · Intermediate ·🤖 AI Agents & Automation ·2mo ago
March 3rd, Computer History Museum CODING AGENTS CONFERENCE, come join us while there are still tickets left. https://luma.com/codingagents Thanks to@ProsusGroupfor collaborating on the Agents in Production Virtual Conference 2025. MCP has revolutionized how AI agents interact with the world. However, with over 13,000 MCP servers launched in 2025 alone, it has also opened a Pandora's box of security vulnerabilities that most organizations aren't prepared to handle: 10% are known to be malicious, the rest of the 90% are exploitable. This presentation guides you through the MCP threat landscape, showcasing real-world exploits already in the wild. We'll examine the most dangerous attack vectors including tool poisoning (hidden instructions lurking in tool descriptions), rug-pulls (bait-and-switch tactics that change behavior post-approval), conversation history theft, and cross-server tool shadowing. We won't leave you defenseless. For each vulnerability demonstrated, you'll learn practical defensive strategies and implementation patterns to safeguard your MCP deployments. Whether you're a security engineer protecting AI agents, a developer building MCP servers, or a a business user integrating your CRM to Claude, you'll walk away with: A comprehensive understanding of the MCP attack surface Practical knowledge of how these exploits work A security checklist for MCP implementations Strategies for detecting and responding to MCP-based attacks. As enterprises adopt MCP faster than security teams can assess the risks, this session provides the essential knowledge needed to stay ahead of attackers in the age of autonomous AI agents. Bio // Vitor is the co-founder of Runlayer, currently busy making AI safe for Enterprise. Previously he was a Staff AI Engineer at Zapier, where he was the technical lead for Zapier Agents. A Prosus | MLOps Community Production
Watch on YouTube ↗ (saves to browser)
Sign in to unlock AI tutor explanation · ⚡30

Playlist

Uploads from MLOps.community · MLOps.community · 0 of 60

← Previous Next →
1 Our 1st MLOps Meetup // Luke Marsden // MLOps Meetup #1
Our 1st MLOps Meetup // Luke Marsden // MLOps Meetup #1
MLOps.community
 2 Remote Collaboration as a Data Scientist
Remote Collaboration as a Data Scientist
MLOps.community
 3 MLOps Manifesto with Luke Marsden from Dotscience
MLOps Manifesto with Luke Marsden from Dotscience
MLOps.community
 4 MLOps lifecycle description
MLOps lifecycle description
MLOps.community
 5 What Does Best in Class AI/ML Governance Look Like in Fin Services? // Charles Radclyffe // MLOps #2
What Does Best in Class AI/ML Governance Look Like in Fin Services? // Charles Radclyffe // MLOps #2
MLOps.community
 6 Life purpose and too many spreadsheets
Life purpose and too many spreadsheets
MLOps.community
 7 Explainability, Black boxes and EU white paper on reproducibility
Explainability, Black boxes and EU white paper on reproducibility
MLOps.community
 8 Hierarchy of Machine Learning Needs // Phil Winder // MLOps Meetup #3
Hierarchy of Machine Learning Needs // Phil Winder // MLOps Meetup #3
MLOps.community
 9 Automatically Retrain Machine Learning Models? Are best practices worth it?
Automatically Retrain Machine Learning Models? Are best practices worth it?
MLOps.community
 10 Building an MLOps Team? Key ideas to keep in mind
Building an MLOps Team? Key ideas to keep in mind
MLOps.community
 11 Hierarchy of MLOps Needs
Hierarchy of MLOps Needs
MLOps.community
 12 Bare necessities for getting an ML model into production
Bare necessities for getting an ML model into production
MLOps.community
 13 MLOps and Monitoring
MLOps and Monitoring
MLOps.community
 14 How Phil Winder got into Data Science and Software Engineering
How Phil Winder got into Data Science and Software Engineering
MLOps.community
 15 Provenance and Reproducibility in Machine Learning; what is it and why you need it?
Provenance and Reproducibility in Machine Learning; what is it and why you need it?
MLOps.community
 16 Friction Between Data Scientists and Software Engineers
Friction Between Data Scientists and Software Engineers
MLOps.community
 17 MLOps Problems in different size companies
MLOps Problems in different size companies
MLOps.community
 18 ML tooling in large companies
ML tooling in large companies
MLOps.community
 19 ML Platforms - The build vs buy question
ML Platforms - The build vs buy question
MLOps.community
 20 ML Services Gateway at SurveyMonkey
ML Services Gateway at SurveyMonkey
MLOps.community
 21 Message buses, Async and sync architecture
Message buses, Async and sync architecture
MLOps.community
 22 MLOps #4: Shubhi Jain - Building an ML Platform @SurveyMonkey
MLOps #4: Shubhi Jain - Building an ML Platform @SurveyMonkey
MLOps.community
 23 Hybrid Data Science Teams @SurveyMonkey
Hybrid Data Science Teams @SurveyMonkey
MLOps.community
 24 How do you handle ML version control at SurveyMonkey
How do you handle ML version control at SurveyMonkey
MLOps.community
 25 Doing ML with Personal Information
Doing ML with Personal Information
MLOps.community
 26 Evolution of the ML feature store @SurveyMonkey
Evolution of the ML feature store @SurveyMonkey
MLOps.community
 27 Developing a Machine Learning Feature Store
Developing a Machine Learning Feature Store
MLOps.community
 28 Auto retrain ML models is not the question
Auto retrain ML models is not the question
MLOps.community
 29 3 key parts to Machine Learning monitoring
3 key parts to Machine Learning monitoring
MLOps.community
 30 MLOps Meetup #6: Mid-Scale Production Feature Engineering with Dr. Venkata Pingali
MLOps Meetup #6: Mid-Scale Production Feature Engineering with Dr. Venkata Pingali
MLOps.community
 31 MLOps meetup #5 High Stakes ML: Active Failures, Latent Factors with Flavio Clesio
MLOps meetup #5 High Stakes ML: Active Failures, Latent Factors with Flavio Clesio
MLOps.community
 32 MLOps: Airflow Pros and Cons
MLOps: Airflow Pros and Cons
MLOps.community
 33 Specific challenges in Machine Learning
Specific challenges in Machine Learning
MLOps.community
 34 Current State Of Machine Learning
Current State Of Machine Learning
MLOps.community
 35 Humans in the Loop are a defining factor in Machine Learning
Humans in the Loop are a defining factor in Machine Learning
MLOps.community
 36 Learning from real life Machine Learning failures
Learning from real life Machine Learning failures
MLOps.community
 37 Survivorship Bias in machine learning tutorials
Survivorship Bias in machine learning tutorials
MLOps.community
 38 Swiss Cheese model in Machine Learning
Swiss Cheese model in Machine Learning
MLOps.community
 39 Resume driven development in Machine learning & software engineering
Resume driven development in Machine learning & software engineering
MLOps.community
 40 Who has the highest standards in ML?
Who has the highest standards in ML?
MLOps.community
 41 Venkata Pingali of Scribble Data Thoughts on the Current State of Machine Learning
Venkata Pingali of Scribble Data Thoughts on the Current State of Machine Learning
MLOps.community
 42 Dependable data and being able to Trust in your Data with Venkata Pengali of Scribble Data
Dependable data and being able to Trust in your Data with Venkata Pengali of Scribble Data
MLOps.community
 43 Speed, Trust, Evolution and Scale in MLOps
Speed, Trust, Evolution and Scale in MLOps
MLOps.community
 44 More difficult transition for data scientists to become ML engineers
More difficult transition for data scientists to become ML engineers
MLOps.community
 45 How many models in prod til I need a dedicated ML platform?
How many models in prod til I need a dedicated ML platform?
MLOps.community
 46 Deeper thinking from data scientists around platform blackholes
Deeper thinking from data scientists around platform blackholes
MLOps.community
 47 Checkpointing, metadata, and confidence in your data
Checkpointing, metadata, and confidence in your data
MLOps.community
 48 Adjacent usecases and multistep feature engineering
Adjacent usecases and multistep feature engineering
MLOps.community
 49 Standardization of Machine Learning tools like in Software Engineering with Venkata Pingali
Standardization of Machine Learning tools like in Software Engineering with Venkata Pingali
MLOps.community
 50 Reproducability flaws in end to end Machine Learning debugging
Reproducability flaws in end to end Machine Learning debugging
MLOps.community
 51 3rd wave of data scientists
3rd wave of data scientists
MLOps.community
 52 MLOps meetup #7 Alex Spanos // TrueLayer 's MLOps Pipeline
MLOps meetup #7 Alex Spanos // TrueLayer 's MLOps Pipeline
MLOps.community
 53 MLOps Meetup #8 Optimizing Your ML Workflow with Kubeflow 1.0
MLOps Meetup #8 Optimizing Your ML Workflow with Kubeflow 1.0
MLOps.community
 54 Are Kubeflow and Airflow complementary?
Are Kubeflow and Airflow complementary?
MLOps.community
 55 Why Kubeflow gained so much traction=open community
Why Kubeflow gained so much traction=open community
MLOps.community
 56 Who decides the dirrection of Kubeflow
Who decides the dirrection of Kubeflow
MLOps.community
 57 What do Kubeflow and Arrikto do and how do they work together?
What do Kubeflow and Arrikto do and how do they work together?
MLOps.community
 58 Versioning your ML steps with Kubeflow
Versioning your ML steps with Kubeflow
MLOps.community
 59 Machine Learning Lifecycles//Perception vs Reality
Machine Learning Lifecycles//Perception vs Reality
MLOps.community
 60 Kubeflow vs SageMaker in Machine Learning
Kubeflow vs SageMaker in Machine Learning
MLOps.community

Related AI Lessons

⚡
The Context Layer: Why Enterprise AI Agents Fail Without It — and What It Actually Takes to Fix That
Enterprise AI agents often fail due to lack of context, but understanding the four-layer context problem can help fix this issue
Dev.to · Swapnil Chougule
 ⚡
Comparing 6 AI Routers Is a Mistake — Until You Define ‘Survived’
Evaluating AI routers requires a clear definition of success criteria, as comparing them without context is misleading
Medium · AI
 ⚡
Comparing 6 AI Routers Is a Mistake — Until You Define ‘Survived’
Evaluating AI routers requires defining survival metrics, as a simple comparison of 6 AI routers can be misleading
Medium · Programming
 ⚡
What if an AI continued thinking even after you closed the chat?
Explore the concept of AI systems that continue thinking after a conversation ends and its implications
Dev.to · Stell
Up next
Combine Skills and MCP to Close the Context Gap — Pedro Rodrigues, Supabase
AI Engineer
Watch →