New Papers Target the Weakest Point in Agent Deployments: Cross-Domain Tool Abuse in the Model Context Protocol · Polylog