Deadbugz campaign compromised 23 AI projects in 74 minutes via MCP

The Deadbugz campaign compromised 23 AI projects in 74 minutes through the MCP server supply chain. Cisco AI Defense released three open source scanners — MCP Scanner, A2A Scanner and Skill Scanner — to check such dependencies. The public MCP server population exceeds 21,000, with 68 vulnerabilities counted in September 2026 alone.

• 23 AI projects compromised in 74 minutes via MCP servers
• Cisco released MCP Scanner, A2A Scanner and Skill Scanner
• Over 21,000 public MCP servers, 68 vulnerabilities in one month
• postmark-mcp was the first malicious MCP server found in the wild