Niche AI tools pose major cybersecurity risk to infrastructure operators

A recent report by security firm TrendAI warned that niche AI tools used by critical infrastructure organizations pose serious cybersecurity hazards, because their developers have typically never undergone mainstream AI governance reviews. A scan of 21.6 million URLs and 4.6 million devices identified 43,175 AI-related services in use across 25 industries, of which 2,457 were classified as "niche," appearing in no more than 10 instances across only one or two industries. The report recommended expanding inventorying beyond mainstream vendors and prioritizing reviews based on data sensitivity rather than vendor size, and also flagged risks including exposed and misconfigured Model Context Protocol (MCP) servers and vulnerabilities in open AI infrastructure.