Four reports, one week. One conclusion.
Attackers are not breaking AI models. They are walking through the infrastructure.
1,467 MCP servers in one scan. Half the ecosystem repos teach plaintext credential storage. Shadow MCP servers on laptops via Git, Slack, and zip files, never inventoried.
The infrastructure is the attack surface. Screen it.
blog.relayshield.netAttackers Aren't Breaking the Models. They're Walking Through the Infrastructure. | RelayShieldTrendAI's 1H 2026 State of AI Security report has a finding that should reframe how we think about AI security: attackers are going after the infrastructure around models, not the...