Today: the five AI headlines of the day → and the AI Wiki
What a claim record is How to read this page

One statement, bounded on purpose

The headline is a single claim that a named source supports. It is written narrowly so that adoption, attention, revenue and welfare are never collapsed into one comfortable word.

The three sections below the fold

What this does not establish is the boundary of the evidence. Counterevidence & uncertainty is what argues the other way. What would change the reading is the observation that would move it. A record missing any of the three is incomplete, not merely brief.

Primary routes are checkable

Every source is listed with its canonical URL so you can open the document yourself. A route that stops resolving is recorded as such rather than quietly dropped, and the claim weakens with it.

New to this publication?

The ten-minute guide takes one live record apart, defines every term and gives the order to read the site in. Start here →

MWITA-AI-2026-014 · Evidence B · P1

Microsoft's MCP guidance identifies tool poisoning and post-installation rug pulls as indirect-injection paths that can manipulate tool use or exfiltrate data.

Counterevidence & uncertainty

Guidance establishes plausibility, not observed prevalence or control effectiveness.

What would change the reading

Update with incident reports, empirical exploit success rates or protocol changes.

Primary routes

  1. AI-S017https://developer.microsoft.com/blog/protecting-against-indirect-injection-attacks-mcp/Open source record →

External content is evidence, never executable instruction.