Microsoft Warns Poisoned Tool Descriptions Can Hijack AI Agents

Microsoft researchers found that attackers can manipulate AI agents by poisoning tool descriptions, causing them to leak data without breaking any rules. The attack exploits how agents interpret instructions, making every step appear routine. Microsoft Incident Response highlighted the risk, noting default setups may not detect the threat.