Researchers bind MCP decode-time provenance to stop image-stego instructions reaching tools
Yocam and co-authors show LSB, DCT, and metadata payloads in email-signature images bypass text scanners, then propose HMAC trust labels with an MCP provenance ledger.
Read the piece