· ai-devtools
Alleged AI-aided cyberattack exploits assistant interface to breach German web host
Hackers allegedly assisted by AI breached a German web hosting company through a tool designed to allow customers to connect AI assistants to their accounts, the company disclosed over the weekend.
Mittwald CM Service, a hosting provider for web agencies based in North Rhine-Westphalia, disclosed in a blog post Saturday that hackers had compromised 56 customer projects after going undetected on its systems for eight days. The company’s managing director Robert Meyer said the attackers exploited a flaw in Mittwald’s Model Context Protocol (MCP) server used to allow customers to connect their AI assistants to mStudio, a platform for managing websites and hosting services. It is unclear whether the flaw was in the company’s own code or in the open-source MCP software libraries.
