garak

A security researcher developed mcpscan, a static scanner for MCP servers and Claude Code projects, after discovering tool poisoning attacks that hide malicious instructions in Unicode zero-width char…

A developer maintaining bulwark-mcp, an open-source proxy that scans MCP tool results for indirect prompt injection, discovered that a class of attacks bypasses the detector by impersonating the secur…

An independent assessment by AIRQ (AI Risk Quadrant, 2026 Q2) found that only 11% of 100 evaluated commercial and publicly available AI agents met its security threshold, with many production agents r…