Скачать или смотреть First Look - OWASP MCP Top 10 – 2025

Welcome to the first look at the OWASP MCP Top 10 – 2025, a new community-driven initiative to help secure the emerging ecosystem of Model Context Protocol (MCP) and agentic AI systems.

MCP enables AI agents to interact with real-world tools, data, and applications — unlocking powerful automation.
But with this power comes a new attack surface blending AppSec, Cloud, AI Safety, and Supply Chain Security.

This video walks you through:
🔹 What MCP is
🔹 Why we need security guidance
🔹 The MCP Top 10 risks
🔹 Real-world examples & impact
🔹 Key best practices and mitigations

Whether you’re a developer, architect, researcher, or AppSec professional, this guide will help you understand and address the risks in building MCP-enabled and AI-integrated workflows.

🧩 Top 10 Categories Covered

Token Mismanagement & Secret Exposure
Privilege Escalation via Scope Creep
Insecure MCP Protocol Implementations
Prompt Injection via Contextual Payloads
Schema Poisoning
Supply Chain & Dependency Tampering
Insecure Plugin Integrations
Lack of Audit & Telemetry
Shadow MCP Servers
Context Injection & Over-Sharing

Feedback Here :- https://docs.google.com/document/d/1y...

📘 More Coming Soon
✅ Full written report
✅ GitHub repo + community feedback
✅ Samples, diagrams & demos
✅ Conference & workshop sessions

If you’d like to contribute to this OWASP effort, join the discussion and help shape the future of AI security!

🌐 Learn more: https://owasp.org

📨 Contact: [email protected]