Internet-wide reconnaissance is expanding beyond conventional application targets to include Model Context Protocol (MCP) services, AI assistant configuration files, and locally exposed LLM endpoints. A 14-day review of Apache and ModSecurity logs from a small, low-traffic shared host found roughly 200 requests tied to AI-agent reconnaissance, alongside routine WordPress, .env, Git, and Spring Boot Actuator […]
The post Attackers Combine MCP Recon With Cloud Metadata SSRF to Steal Service Account Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.