Loading story…
Model Context Protocol (MCP) servers are increasingly being adopted by Security Operations Center (SOC) teams to streamline threat intelligence workflows and enhance incident response capabilities. MCP servers enable AI agents to translate natural-language queries into structured tool interactions, allowing analysts to efficiently gather and correlate data from multiple sources without the need to manually switch between disparate platforms. This integration helps SOC teams investigate infrastructure, identify critical incidents, retrieve indicators of compromise (IOCs), and detect phishing domains from a unified interface, thereby accelerating triage and improving visibility across the threat landscape. The operational benefits of MCP servers are significant, as they reduce manual enrichment tasks and operational friction, enabling faster and more accurate responses to security incidents. However, the rapid adoption of MCP technology has introduced new security challenges, as the protocol was designed primarily for functionality rather than security. Security controls and frameworks for MCP are still in their infancy, leaving organizations exposed to both traditional and novel attack vectors. Recent security assessments have revealed that a substantial proportion of MCP server implementations are vulnerable to classic web application threats, including command injection, SQL injection (SQLi), server-side request forgery (SSRF), and directory traversal. Specifically, one assessment found that 43% of popular MCP server implementations contained command injection vulnerabilities, 22% allowed directory traversal or arbitrary file read, and 30% were susceptible to SSRF attacks. These vulnerabilities provide attackers with new entry points into organizations that have integrated MCP-based applications into their workflows. The security community is actively researching these risks, but the evolving nature of MCP means that new vulnerabilities may continue to emerge as the technology matures. Organizations are advised to approach MCP adoption with caution, ensuring that security considerations are prioritized alongside operational benefits. The combination of increased efficiency for SOC teams and the emergence of new attack surfaces underscores the need for robust security controls, regular vulnerability assessments, and ongoing monitoring of MCP server deployments. As agentic AI systems become more prevalent in business environments, the balance between innovation and security will be critical to maintaining resilient security operations. SOC teams must remain vigilant, leveraging the advantages of MCP servers while proactively addressing the associated risks to safeguard their organizations against evolving threats.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
SOCRadar published a blog outlining 10 threat intelligence use cases for MCP servers in SOC operations, including investigations into malicious IPs, phishing domains, credential leaks, ransomware infrastructure, and state-sponsored campaigns. The post highlights operational use of MCP for consolidating and automating threat intelligence workflows.
Akamai released a security blog post describing how to prevent command injection and SQL injection attacks in MCP-related environments. The publication marks a technical disclosure and defensive guidance event around MCP security risks.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The increasing adoption of Model Context Protocol (MCP) servers to facilitate data access for artificial intelligence (AI) applications has introduced both new opportunities and security challenges for organizations. MCP servers, originally developed by Anthropic, have become a de facto standard for connecting AI models to various data sources, enabling more effective and context-aware processing of information. However, as these servers proliferate across IT environments, they have also emerged as a potential attack surface for cybercriminals seeking to exploit vulnerabilities for data exfiltration and unauthorized access. To address these risks, MCPTotal has launched a Secure MCP Platform that provides a centralized approach to managing and securing MCP server deployments. This platform employs a hub-and-gateway architecture, allowing organizations to catalog, authenticate, and monitor MCP servers through a graphical interface, ensuring only vetted servers are deployed. The Secure MCP Platform also functions as an AI-native firewall, capable of monitoring traffic, enforcing security policies in real time, and surfacing supply chain exposures, prompt injection vulnerabilities, rogue server activity, and authentication gaps. Traditional security tools and even some newer solutions designed for large language models (LLMs) are not equipped to monitor or control MCP-specific traffic, highlighting the need for specialized platforms like MCPTotal’s offering. In parallel, security vendors such as Sysdig and Snyk are leveraging AI-powered approaches to integrate static vulnerability findings with real-time cloud context, using MCP servers to bridge the gap between code-level vulnerabilities and live cloud exposures. This integration enables security teams to prioritize risks based on actual exposure and behavior, rather than being overwhelmed by theoretical vulnerabilities. The use of large language models (LLMs) and MCP servers allows for rapid correlation of security signals across domains, reducing manual effort and improving the accuracy of risk assessments. The dynamic nature of cloud workloads, including ephemeral containers and microservices, further complicates the security landscape, making real-time context and automated policy enforcement essential. By combining advanced AI techniques with secure MCP server management, organizations can better defend against both traditional vulnerabilities and emerging threats targeting AI infrastructure. The evolution of MCP server security reflects a broader trend toward context-aware, AI-driven security solutions that can adapt to the complexities of modern cloud environments. As MCP servers become more integral to AI operations, their security will be critical to maintaining data integrity and preventing sophisticated attacks. The industry’s response, as seen in the launch of secure hosting platforms and the integration of AI-powered risk analysis, demonstrates a proactive approach to safeguarding the next generation of AI-enabled systems. Organizations are encouraged to adopt these new security measures to ensure that the benefits of MCP servers and AI applications are not undermined by preventable security lapses. The convergence of AI, cloud, and secure protocol management marks a significant step forward in the ongoing effort to protect digital assets in an increasingly interconnected world.
Jun 29, 2026
Security teams are increasingly integrating AI-powered tools and custom agents into their Security Operations Centers (SOCs), leveraging frameworks like the Model Context Protocol (MCP) to orchestrate vendor capabilities with internal systems. This approach enables more efficient alert triage, workflow automation, and the combination of pre-built and custom AI agents, allowing for tailored security operations that bridge gaps between disparate tools and organizational context. Simultaneously, the rise of AI-generated code and AI coding assistants is transforming the application security landscape, introducing new risks such as vulnerabilities in authentication, authorization, and privilege escalation paths. Research highlights that AI-generated code can be vulnerable up to 75% of the time, and traditional security scanners may struggle to detect architectural flaws in such code due to the lack of standard identifiers. The adoption of MCP is noted as a pervasive trend, offering both opportunities and challenges in managing these evolving risks.
Jul 12, 2026
Security researchers evaluated the risks associated with deploying Model Context Protocol (MCP) servers, which enable AI systems like ChatGPT to interact with external tools and data. One investigation used the GitHub MCP server in conjunction with OpenAI's Codex to analyze code, identify security issues, and propose fixes, highlighting how AI agents can streamline code review and vulnerability management. The study also explored whether AI-driven code analysis could be manipulated to conceal security flaws, emphasizing the importance of context and transparency in automated security workflows. Separately, honeypots simulating MCP server deployments were exposed to the internet to assess real-world attack activity. These honeypots, configured with varying authentication levels, were quickly discovered by internet scanners but did not experience targeted exploitation or MCP-specific attacks. The only notable incident was a controlled proof-of-concept prompt-hijacking flaw in a custom MCP build, which was not observed in the wild. The findings suggest that, while MCP servers are rapidly indexed by threat actors, current risks stem primarily from implementation errors rather than active targeting, underscoring the need for secure deployment practices and ongoing monitoring as MCP adoption grows.
Jun 29, 2026