RingZero BlogRingZero is one platform for all of your source code security needs — tunable AI agents that penetration-test the hosts you control, supply chain scanning, org-wide security health, and clean, actionable reporting.https://ringzero.tech/MCP tool poisoning: how malicious MCP servers attack AI agents — and how to catch themhttps://ringzero.tech/blog/mcp-tool-poisoning/https://ringzero.tech/blog/mcp-tool-poisoning/Tool poisoning hides instructions inside MCP tool descriptions where users never look but agents always read. Here's how the attack works and how to detect it.Thu, 23 Jul 2026 00:00:00 GMTHow to vet an MCP server before your agents load ithttps://ringzero.tech/blog/how-to-vet-an-mcp-server/https://ringzero.tech/blog/how-to-vet-an-mcp-server/A practical nine-point checklist for reviewing any MCP server — package or remote endpoint — before it gets your agent's privileges.Wed, 22 Jul 2026 00:00:00 GMTWhat is AI penetration testing? How autonomous pentest agents actually workhttps://ringzero.tech/blog/what-is-ai-penetration-testing/https://ringzero.tech/blog/what-is-ai-penetration-testing/AI pentest agents reason about targets instead of matching patterns. What that means in practice, how a run is structured, and why authorization is the hard part.Tue, 21 Jul 2026 00:00:00 GMTTyposquatting comes for MCP registries: lessons from npm's decade of supply chain attackshttps://ringzero.tech/blog/mcp-typosquatting-lessons-from-npm/https://ringzero.tech/blog/mcp-typosquatting-lessons-from-npm/npm spent ten years teaching the industry how package registries get attacked. MCP registries are about to take the same course — with agents amplifying the blast radius.Mon, 20 Jul 2026 00:00:00 GMT