Cybersecurity researchers warn that AI agents are rapidly expanding the attack surface, with 95% of Model Context Protocol (MCP) deployments running on employee endpoints with no security visibility. GreyNoise recorded over 91,000 attack sessions on LLM infrastructure in three months, while nation-states like Iran and China are leveraging AI for cyberwarfare capabilities.