The protocol that lets AI agents use tools also gave attackers a new attack surface. January 2026 showed us how bad it can get.
