|
 |
 |
More than 50% of enterprises are experimenting or building with the Model Context Protocol (MCP). They use MCP to connect their AI agents to data and systems behind their corporate firewall, providing agents with the context they need to deliver real value: better code, richer responses, deeper insights, etc. The technical leaders who help their companies deploy MCP in production will create huge competitive advantages.
So, how do you get out in front of MCP?
With this model in hand, you will know where you are today and how to take the next step. The model includes a simple process and technology indicators for every stage and best of all, there are no forms - it’s yours to freely access and share.
The MCP Maturity Model was created by Stacklok, who have built an MCP platform and are working with enterprises to put MCP into production. Their Applied AI Engineers work hands-on with leaders to curate trusted registries, deploy advanced security measures and light up AI agents. You can learn more about the company at stacklok.com, or just drop them an email at enterprise@stacklok.com to start a conversation.
Welcome to another _secpro!
If the last week has felt unusually loud in cybersecurity, you’re not imagining it. The threat landscape rarely sits still, but the volume and velocity of activity over the past several days have been particularly notable — from fresh zero-day disclosures to the continued industrialization of ransomware operations.
Several incidents reinforced a now-familiar pattern: adversaries are moving faster between initial access and lateral movement, compressing dwell time and forcing defenders to detect and respond in near real time. We’ve seen renewed exploitation of edge devices and VPN infrastructure, alongside opportunistic abuse of newly published proof-of-concept code. Patch latency remains a decisive risk factor.
Ransomware groups, meanwhile, continue to evolve their business models. Double-extortion is table stakes; data theft without encryption is resurging as affiliates look to reduce operational friction while maintaining leverage. Law enforcement pressure has fragmented some major crews, but the ecosystem remains resilient — smaller operators are filling the gaps quickly.
Another theme this week: the expanding role of AI in offensive tradecraft. Security teams are tracking more convincing phishing pretexts, better-localized lures, and automated reconnaissance workflows. While not revolutionary on their own, these incremental gains are compounding attacker efficiency.
On the defensive side, there’s cautious optimism. Organizations accelerating identity hardening, network segmentation, and telemetry aggregation are seeing measurable gains in detection fidelity.
In this issue, we break down the most consequential events, extract the technical lessons that matter, and outline practical mitigation steps you can operationalize immediately. Let’s get into it.
If you want more, you know what you need to do: sign up to the premium and get access to everything we have on offer. Click the link above to visit our Substack and sign up there!
Cheers!
Austin Miller
Editor-in-Chief
The Problem with One-Size-Fits-All Mobile App Security and How to Fix It
 |
Is your team struggling to balance security requirements with user experience? Join us on February 24 at 4 PM CET / 10 AM ET for a webinar discussing how leading financial services teams are shifting to data-driven, risk-based mobile security for more precise responses.