Our recent work on training-free backdoor attacks against MCP-enabled agents has been accepted to the Annual Computer Security Applications Conference (ACSAC) 2026!