Trend Micro: Exposed MCP Servers Nearly Triple to 1,467 — Cloud Compromise Now Possible
Trend Micro·high signal
Follow-up research shows exposed MCP servers surged from 492 to 1,467 instances running without authentication or encryption. 74% hosted on AWS, Azure, GCP, or Oracle. At least 8 servers directly manage cloud resources (create, modify, delete). Most use deprecated SSE transport. The execute_sql tool found on 70 hosts creates open backdoors to sensitive data.