New research from Microsoft suggests the MCP could become a new attack surface, allowing compromised tools to redirect AI agents.