Connect with us

Education

Agentic AI Protocol Is Vulnerable to Cyber Attacks — Campus Technology

Published

on


Report: Agentic AI Protocol Is Vulnerable to Cyber Attacks

A new report has identified significant security vulnerabilities in the Model Context Protocol (MCP), technology introduced by Anthropic in November 2024 to facilitate communication between AI agents and external tools.

MCP technology has gained industry traction as a way to standardize how AI agents interact and share context, which is crucial for building more sophisticated and collaborative AI systems within enterprises. With that traction, however, has come attention from threat actors. The recent report by Backslash Security highlights two major flaws — dubbed “NeighborJack” and OS injection vulnerabilities — that compromise the integrity of MCP servers, potentially allowing unauthorized access and control over host systems.

“MCP NeighborJack” was the most common weakness Backlash discovered, with hundreds of cases found among the over 7,000 publicly accessible MCP servers it analyzed. The core problem is that these vulnerable MCP servers were explicitly bound to all network interfaces (0.0.0.0), making them “accessible to anyone on the same local network.” This misconfiguration essentially exposes the MCP server to potential attackers within the local network, creating a significant point of entry for exploitation.

The second major category of vulnerability identified was “Excessive Permissions & OS Injection.” Dozens of MCP servers were found to permit “arbitrary command execution on the host machine.” This critical flaw can arise from various coding practices, such as “careless use of a subprocess, a lack of input sanitization, or security bugs like path traversal.”

The real-world risk is severe. “The MCP server can access the host that runs the MCP and potentially allow a remote user to control your operating system,” Backlash said in a blog post. This means an attacker could gain full control of the underlying machine hosting the MCP server. Backslash’s research observed several MCP servers that tragically contained both the “NeighborJack” vulnerability and excessive permissions, creating “a critical toxic combination.”

In such cases, “anyone on the same network can take full control of the host machine running the server,” enabling malicious actors to “run any command, scrape memory, or impersonate tools used by AI agents.”

MCP Server Security Hub

To directly address the identified vulnerabilities and the new attack surface presented by MCP servers, Backslash has established the MCP Server Security Hub, which among other things lists the highest-risk MCPs.


MCP Server Security Hub
[Click on image for larger view.] MCP Server Security Hub (source: Backslash Security).

This platform is the first publicly searchable security database dedicated to MCP servers, the company said. It provides a live, dynamically maintained, and searchable central database containing over 7,000 MCP server entries, with new entries added daily. The Hub’s primary function is to score publicly available MCP servers based on their risk posture. Each entry offers detailed information on the security risks associated with a given MCP server, including malicious patterns, code weaknesses, detectable attack vectors, and information about the MCP server’s origin. Backslash encourages anyone considering using an MCP server to first check it on the Hub to ensure its safety.

Recommendations

Unsurprisingly, Backslash Security’s list of recommendations regarding the threat to MCP servers starts with utilizing the MCP Server Security Hub. Other advice includes:

  • Use the Vibe Coding Environment Self-Assessment Tool. To gain visibility into the vibe coding tools used by developers and continuously assess the risk posed by LLM models, MCP servers, and IDE AI rules, Backslash has launched a free self-assessment tool for vibe coding environments.

  • Validate Data Source for LLM Agents. It is recommended to validate the source of the data that your LLM agent is receiving to prevent potential data source poisoning.

For more information, visit the Backslash Security blog.

About the Author



David Ramel is an editor and writer at Converge 360.





Source link

Education

School meals smaller and have less meat due to cost, caterers say

Published

on


Hayley Clarke & Nathan Standley

Education reporter

Hayley Clarke / BBC Four nursery pupils sat at a canteen table enjoying their Friday fish and chips dinner at St Mary's Primary in Stoke-on-Trent, including spaghetti hoops. They are in fancy dress for 'aspirations day'.Hayley Clarke / BBC

School children are getting less meat, cheaper ingredients and smaller portions in their lunches as caterers battle rising costs, the new chair of a school food organisation has said.

Michael Hales, incoming chair of LACA, said schools were increasingly having to bridge the gap between government funding for free school meals and the rising cost of delivering dinner for all of their pupils.

It comes after the government said it would expand free school meals, which Mr Hales said was “welcome”, but added that more funding would be “essential”.

The Department for Education (DfE) said the “fully funded” expansion of free school meals was a “historic step to tackle the stain of child poverty”.

A spokesperson added the government would keep the meal rates paid to schools, which fund free school meals, under review.

In April, the government said those rates would rise by 3p in the next academic year, from £2.58 to £2.61 per meal – a rise which Mr Hales said was “inadequate” and “almost considered an insult”.

He said it meant caterers who were part of LACA and provided about three million school dinners a day, were having to make “really difficult decisions” over portion sizes, and the quality of ingredients they could afford.

He said it was becoming an “ever increasing challenge” to meet the government’s school food standards, which officials said they were looking to “revise” with input from sector experts.

In Stoke-on-Trent, head teacher Clare Morton said she was spending £45,000 per year topping up the money she received from the government to pay for free school meals.

That money could be spent on another member of staff at St Mary’s Primary School, she said, but added it was vitally important all the children were well fed.

“For a lot of our children, this is the only hot meal that they will get during the day,” she said.

“Without healthy food, without a full tummy, these children won’t be able to learn.”

Hayley Clarke / BBC Head teacher Clare Morton smiling at the camera, with children eating their school dinners in the lunch hall behind her. Clare has short, blonde hair with a fringe, and is wearing a black dress and red lipstick.Hayley Clarke / BBC

Head teacher Clare Morton says her school spent £45,000 this year topping up its free school meal funding

In England, the government will pay primary schools £2.61 per meal in 2025-26 to deliver its universal infant free school meals scheme, which makes all children from reception up to Year 2, regardless of household income, eligible for a free school dinner.

After Year 2, primary and secondary schools also get additional pupil premium funding from government for each of their pupils who gets a free school meal. Currently, children qualify for a free school meal if their family is on Universal Credit and earns under £7,400 a year.

In June, the government announced that it would be changing that eligibility criteria to make all children whose families are on Universal Credit, regardless of household income, eligible for a free school meal from September 2026.

The change would mean 500,000 more children qualify for a free school meal, the government said.

Ms Morton said it was “fantastic” more children would be eligible, but added the government “needs to acknowledge that there’s a gap between what the school are actually getting and how much it costs to feed the children”.

Currently, the money her school needs to fund that gap is supported by 72 parents who pay for their child’s school meal. As the free school meals scheme expands and more children become eligible, that income will be “wiped out”, she said.

The government’s 3p meal rate increase “really isn’t enough” to make up any of the school’s £45,000 food deficit, she added.

Mr Hales said a recent survey of its members suggested the real cost of delivering a meal was actually more like £3.45 – roughly 80p more than the £2.61 given to schools to fund free school meals in England.

LACA said it sent its annual cost of living survey to 500 members. The 67 who responded said they catered for a total of 5,689 schools with a total pupil population of roughly 1.3 million. Overall, England has approximately 24,000 state schools with an overall pupil population of just over nine million.

Ann Gannon / BBC A head and shoulders image shows Michael Hales smiling into the camera. He is sat in a room wearing a grey suit with orange trim and a bright orange tie.Ann Gannon / BBC

LACA chair Michael Hales said costs were rising more quickly than the 3p increase allocated by government could provide for

Of the 67 schools, councils and private catering firms who responded to the LACA survey:

  • 17 said they had decreased some portion sizes
  • 35 said they had cut some menu options
  • 38 said they had reduced some meats with cheaper protein sources
  • 56 said they had adjusted their recipes

LACA said its survey also suggested that, since March 2020, the amount paid for school dinners by parents whose children were not eligible for free school meals had increased by 20%.

Mr Hales said that could continue to rise if schools were unable to meet rising costs with increased government funding.

Mum-of-three Mandy Mazliah, from Cambridgeshire, said she had concerns about the nutritional value of her children’s school dinners.

The 45-year-old, who runs a food blog and is a parent ambassador for a children’s food campaign, said her children, aged between 10 and 15, have a mix of packed lunches and dinners provided for them at school.

She said the school food could vary between healthy, balanced meals and pizzas, cookies and donuts, and in some cases portion sizes had been getting smaller.

“What we need is proper investment from the government in healthy school meals, and in fact a whole school food approach to make it more affordable for schools to provide nutritious, appealing, healthy food for all of our children,” she added.

Trish Peters Mandy Mazliah is sitting at a desk smiling at the camera. She is wearing glasses and has her hair in a ponytail. She has her arms crossed and is wearing a zebra print blouse.Trish Peters

Mum Mandy Mazliah says she wants the nutritional value of secondary school meals to improve

Provision of free school meals varies significantly across the UK.

In London and Wales, the offer of a universal free school meal has been extended to all primary school children up to Year 6.

Although the funding rate for most of England is £2.61, in London schools get a higher rate of £3. In Wales, the rate is £3.20.

In Scotland, all children in the first five years of primary school are eligible for free school meals, as well as all children from families receiving the Scottish Child Payment benefit.

Parents in Northern Ireland can apply if they receive certain benefits and are below an income threshold of £15,000.

Additional reporting by Rahib Khan



Source link

Continue Reading

Education

AI cannot supplant learning; it must enable it: Singapore education minister

Published

on