Supply-Chain on George Kanellopouloshttps://gkanellopoulos.com/tags/supply-chain/Recent content in Supply-Chain on George KanellopoulosHugoen-usCopyright © 2026, George Kanellopoulos.Thu, 02 Apr 2026 10:00:00 +0200Tool Metadata Poisoning: An Unresolved Attack Surface in MCPhttps://gkanellopoulos.com/ai-in-the-open/tool-metadata-poisoning-ctms/Thu, 02 Apr 2026 10:00:00 +0200https://gkanellopoulos.com/ai-in-the-open/tool-metadata-poisoning-ctms/Nothing verifies that a tool’s description is what its publisher wrote, and researchers have repeatedly demonstrated poisoning attacks against MCP clients. CTMS is a signing and verification scheme that prevents these attacks at runtime.