CarolinaCon 2026 - Install Once, Exploit Forever: The MCP Plugin Supply-Chain Attack Surface - 17th Talk
Presented at CarolinaCon 2026, this talk shows how a single MCP config entry wires untrusted code into an AI agent’s reasoning, demonstrates two live attack paths — a server that’s...