Model Context Protocol (MCP)

An enterprise network was breached in record time by a human attacker using autonomous AI agents to automate the entire attack chain. The intrusion concluded with the attackers leaving an extensive 80-page security audit detailing the exploited vulnerabilities.

The GhostSplice attack demonstrates how malicious MCP servers can manipulate AI agents into exfiltrating sensitive data by fragmenting instructions across different tool channels. This technique successfully bypasses modern LLM safety guardrails by disguising theft as routine administrative tasks like form completion.

AWS has moved Amazon WorkSpaces for Agents into general availability, enabling AI agents to use virtual desktops to access legacy software. The system integrates MCP and computer vision to balance efficient tool-based tasks with visual GUI interactions.