AI Vulnerability Disclosure Trends

Reco puts 80% of employee AI tools outside IT oversight against 21% of SaaS

The oversight ratio comes from one vendor's platform telemetry and should be read as such, but the capability data underneath it is checkable, and half of the 500 MCP servers sampled from npm can execute shell commands.