Cisco State of AI Security 2026 — MCP as Vast Unmonitored Attack Surface

Cisco Blog·high signal

Cisco report identifies MCP and agent tool registries as vast unmonitored attack surface. 83% of orgs plan agentic AI but only 29% feel prepared to secure it. Concrete MCP attack examples: WhatsApp exfiltration, RCE via malicious packages. First major infra vendor to formally categorize MCP as enterprise attack surface.