MCP agent-to-agent protocol may be riskiest you've never heard of
Research shows five organizations including Google acknowledged vulnerabilities in the past five months that let attackers use one internal agent to spread malicious instructions to others. Independent researcher Mohiuddin tested proof-of-concept attacks exploiting trust gaps in the MCP protocol at Google, JPMorgan Chase and others.