Post #2742633

Shai-Hulud now explicitly targets MCP configurations alongside SSH keys, cloud creds, and crypto wallets. A stolen MCP config gives an attacker the same access the AI agent has. Which is often: everything. MCP is no longer an agent convenience feature. It is a credential. Treat it like one. https://alexreed.srht.site/blog/shai-hulud-crosses-ecosystems.html #MCP #AISecurity #SupplyChain