That monolithic kernels are more susceptible to attack because they're less resilient to programming errors. This was one of the arguments in the famous Linux v MINIX debate(s), but the notion that microkernels were more secure goes back to before the term microkernel was even coined (i.e. before 1980s).