Just read the research from the source (https://sites.google.com/view/invitation-is-all-you-need/hom...). This and the MCP attacks really feel like the era of sql injection attacks all over again. Except this time it's non deterministic and even the best minds are kind of struggling to make the LLMs jail break proof.
In the midst of all of this, Microsoft is looking to integrate MCP into the OS layer. We are truly back to a move fast and let things break era