Get the latest tech news
My Lethal Trifecta talk at the Bay Area AI Security Meetup
I gave a talk on Wednesday at the Bay Area AI Security Meetup about prompt injection, the lethal trifecta and the challenges of securing systems that use MCP. It wasn’t …
It’s called that because the root cause is the original sin of AI engineering: we build these systems through string concatenation, by gluing together trusted instructions and untrusted input. If that gets rendered to the user, the act of viewing the image will leak that private data out to the attacker’s server logs via the query string. They need to understand the lethal trifecta and be careful not to enable multiple MCPs at the same time that introduce all three legs, opening them up data stealing attacks.
Or read this on Hacker News
