MCP Security Hits Critical Mass — 30 CVEs, 80% of Enterprises Report Risky Agent Behaviors

The MCP ecosystem now has 30 documented CVEs across six weeks spanning three attack layers: server-side injection (43%), protocol library flaws, and developer tooling vulnerabilities. Simultaneously, the AIUC-1 Consortium reports 80% of enterprises have observed risky agent behaviors including unauthorized system access, while only 21% have complete visibility into agent permissions. Cisco responded by shipping four open-source security scanners (MCP scanner, A2A scanner, pickle fuzzer, skill file scanner). OWASP published its Top 10 for Agentic Applications introducing the "Least Agency" principle. The infrastructure is maturing, but the attack surface is expanding faster. DEV Community | Help Net Security | Cisco Blog