AI Security & Cybersecurity

What Happened A compromised LiteLLM 1.107.0 release reached PyPI and official container images on October 21, 2026. Maintainers said stolen developer GitHub credentials redirected the release workflow to a lookalike repository; how those credentials were obtained has not been independently established. [1] The wheel installed Python startup files named cook.pth, cook.py, and sitecustomize.py. These could…

What Happened Unit 42 identified CVE-2026-109618 and CVE-2026-109619 as critical PHP vulnerabilities in a threat brief updated October 23. PHP is widely used in web servers and content management systems. The available brief does not establish the affected versions, exploit conditions, or whether attacks have occurred [1]. Why It Matters to Businesses An AI application…

What Happened Microsoft assesses that Storm-0940, a China-state-aligned actor, used the ARTEX AI penetration-testing framework to accelerate attacks and was responsible for a ConnectWise Cloud Backup supply-chain compromise. In one October 10–14 campaign, Microsoft observed more than 151,000 failed logons against 327 accounts at eight organizations, with no successful authentication in that campaign. Following the…

What Happened Microsoft attributes a campaign targeting hundreds of organizations to China-state-aligned Storm-0940. Microsoft says the actor used the agentic penetration-testing framework ARTEX to accelerate scanning, password spraying and OAuth application abuse, and assesses that the actor was responsible for a disclosed ConnectWise supply-chain compromise. Some attacks reached privileged cloud access in under three hours.…

What Happened Unit 42 reports that ransomware operators, including Spikey Scorpius (Qilin) and Tarnished Scorpius (Inc), are actively exploiting PAN-OS CVE-2026-0257. Its updated threat brief establishes active exploitation, but the research notes do not specify the exploit mechanism or affected configurations [1]. Microsoft Security argues that AI agents create a different kind of exposure: they…

What Happened Unit 42 reports active ransomware exploitation of PAN-OS CVE-2026-0257, including activity attributed to Spikey Scorpius (Qilin) and Tarnished Scorpius (Inc). Its threat brief was updated on October 19 [1]. Microsoft describes AI agents as a new insider-risk category: agents can act across business systems at machine speed, whether their actions result from mistakes,…

What Happened Recent security reporting highlights two connected problems for AI deployments. Unit 42 identified edge exploits, credential abuse and phishing among the leading initial-access vectors it observed in September 2026; the available summary does not name the remaining two vectors [1]. Separately, Microsoft and NVIDIA published enterprise guidance arguing that open-weight model risk depends…

What Happened Unit 42 reported an AI-powered espionage campaign targeting government Linux infrastructure. Its report describes custom malware, web shells, and advanced credential theft. The available account does not identify the attackers, affected governments, campaign dates, or exactly how AI was used [1]. Why It Matters to Businesses The reported techniques are not limited to…

What Happened Three investigations show how attackers can reach the infrastructure around an AI application without attacking the model itself. Unit 42 investigated an intrusion involving exploitation of CVE-2024-47575, targeting more than 500 FortiGate firewalls and deploying PEERSTITCH, a memory-resident ARM64 implant [1]. Microsoft and Resecurity identified a phishing ecosystem whose kits have been used…

What Happened Unit 42 examined an unsophisticated attack against a European bank’s IT infrastructure that exposed a third-party risk within the bank’s network. The available account does not specify the attack path, the third party’s role, or whether AI systems were involved. Unit 42 also discussed ways to detect and counter similar threats [1]. Why…

What Happened Microsoft launched a PQC TLS Pilot Program for approved certificate authorities to test roots and certificate issuance using ML-DSA-87. Its pilot certificates are not publicly trusted and must not be used for production trust or public-facing websites. Supported Windows 11 testing requires specified updates released from July 28, 2026; seven pilot roots were…

What Happened Microsoft Security’s FORGE Lab reports that its multi-model scanning harness, MDASH, helped discover Windows vulnerabilities assigned 140 CVEs from May through September 2026, including 52 addressed in September’s security release. It also submitted 155 internally validated reports across 23 open-source projects; 93 received documented maintainer acknowledgement or acceptance. These are distinct measures: a…