<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Connectors on LegalRealist AI</title><link>https://legalrealist.ai/tags/connectors/</link><description>Recent content in Connectors on LegalRealist AI</description><generator>Hugo -- gohugo.io</generator><language>en</language><managingEditor>hi@legalrealist.ai (LegalRealist AI)</managingEditor><webMaster>hi@legalrealist.ai (LegalRealist AI)</webMaster><copyright>© 2026 LegalRealist AI</copyright><lastBuildDate>Fri, 26 Jun 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://legalrealist.ai/tags/connectors/index.xml" rel="self" type="application/rss+xml"/><item><title>The Connector Is the Attack Surface</title><link>https://legalrealist.ai/posts/47-mcp-attack-surface/</link><pubDate>Fri, 26 Jun 2026 00:00:00 +0000</pubDate><author>hi@legalrealist.ai (LegalRealist AI)</author><guid>https://legalrealist.ai/posts/47-mcp-attack-surface/</guid><description>The first malicious MCP server in the wild BCC&amp;rsquo;d every email to its author. A poisoned WhatsApp connector showed how one approved tool can siphon another connector&amp;rsquo;s data. When a firm wires AI agents into its document system, the plumbing — not the document — is the new attack surface.</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://legalrealist.ai/posts/47-mcp-attack-surface/feature.png"/></item></channel></rss>