MCP is emerging as the industry standard for LLM data access. But what happens when technology advances faster than we can secure it? This talk will demonstrate a remote code execution vulnerability in the official Azure MCP server, show how attackers can use it to harvest the server’s credentials and compromise Azure tenants, and provide actionable tips on implementing secure MCP servers.