AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

MediumNewsLLM-specific

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

Source: The Hacker News(opens in a new tab)
Published: October 6, 2026
Record updated: October 9, 2026

Summary

OX Security researcher Moshe Siman Tov Bustan reports on an analysis of 15,465 publicly indexed MCP servers across 5 MCP registries, deduplicated to 5,095 unique hostnames. The study found 15.6% of hostnames resolve outside the United States, 0.45% route traffic through consumer tunneling services such as ngrok-free, and 2.3% no longer resolve, with six on expired domains that anyone can register.

Details

Scores and exploitation

Disclosure date: October 6, 2026

Affected

Vendors: Anthropic

Classification

Attack type: Supply chain
Attack sophistication: Moderate
AI component targeted: Plugin
Impact: Confidentiality,
Integrity
Labels: security,
industry

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://thehackernews.com/2026/10/welcome-to-jungle-what-we-found-inside.html

First tracked: October 6, 2026 at 08:01 AM ET, from The Hacker News

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 85% (self-assessed)

Corrections

2026-10-10: Severity changed from high to medium. Severity capped at medium. High and critical measure technical exploitability and are reserved for vulnerabilities and incidents; this record is a news report.

All corrections

Topics

Model Context Protocol

Summary

Topics

Related items

Summary

Topics

Related items