MCP servers have quickly become the connective tissue between AI agents, coding assistants and the tools and data they act on, but security hasn’t kept pace with adoption. We'll share findings from OX Security’s analysis of over 15,000 MCP servers on public registries and 3,000 open-source AI projects, including remote command execution, abandoned servers that can be taken over, and data sovereignty risks. He also discusses how organizations can discover, govern and secure MCP usage at scale before it leads to their next breach.
Segment Resources:
- 0:00 - Introduction to OWASP Global AppSec 2026
- 0:25 - The State of MCP Security
- 0:52 - Researching Over 15,000 Public MCP Servers
- 01:15 - Why MCP Servers Create New Security Risks
- 02:17 - Domain Takeovers and Exposed MCP Servers
- 03:24 - Data Sovereignty and Third-Party MCP Risks
- 03:56 - How Malicious MCP Servers Can Exploit AI Clients
- 04:23 - Prompt Injection and Sensitive Data Exposure
- 06:03 - Understanding the MCP Attack Surface
- 06:37 - Building MCP Visibility and Inventory
- 07:46 - AI Security Controls and MCP Monitoring
- 08:13 - Using Proxies to Secure MCP Traffic
- 09:13 - Demonstrating Malicious MCP Server Behavior
- 09:29 - Proof of Concept: Exfiltrating Sensitive Files
- 11:36 - Reducing Complexity in MCP Security
- 12:28 - Encryption and Vetting Third-Party MCP Tools
- 13:47 - What's Next for MCP and Malware Research
- 14:58 - Closing Remarks
Moshe is a Security Research Team Leader at OX Security, a company specializing in software supply chain security, and has worked in the security industry for 13 years. His work spans cloud security research, container security, memory forensics, and an in-depth understanding of programming languages. He also has extensive experience in mobile security, including iOS and Android research, deep analysis of Android malware, sandboxing, and memory forensics.
Beyond security research, Moshe has published multiple “Can It Run Doom?” projects online, and is also a professional guitarist in a progressive metal band.
