Building and publishing Model Context Protocol (MCP) servers is a crucial step in allowing language models to interact seamlessly with external tools and resources. These servers act as intermediaries ...
A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.