A developer connects their coding agent to a popular MCP server. Minutes later, instructions hidden in that server have hijacked the agent. It quietly removes its own guardrails, reads your cloud credentials, and sends data out over an encrypted channel, all without tripping a single alert.
AI agents now read files, spawn processes, and connect to tools on a user’s behalf, often in auto-approve mode. Most of the controls built to govern them sit wherever the vendor already sits: in the browser, in the MCP path, or in a config file the agent itself can edit.
Join Shlomi Salem, Chief Product Officer and Co-Founder at Neo, and Noah Simon, Director of Product Marketing at Neo, as they replay this attack step by step. At each step, they’ll test the common approaches to securing AI agents: MCP gateways, browser extensions, network proxies, API control planes, and vendor-native hooks.