MCP went from "clever plumbing" to "the most exploited attack surface in developer tooling" in under a year. Here's the full damage report.

The Hook

A developer opens a GitHub repo in Cursor. Their AI assistant loads the project config. A SessionStart hook fires. Before they finish their coffee, their cloud credentials, SSH keys, and .env files are sitting in an attacker's GitHub repo under the name "Miasma: The Spreading Blight."

No phishing email. No malicious download. No "click here" link. Just a repo, an IDE, and a protocol that was designed to make AI tools convenient — and shipped with the security posture of a screen door in a hurricane.

That's the Model Context Protocol (MCP) in 2026. And it's not one bug.…