AI × Security,
decoded daily.
Tight, source-linked briefs on AI-driven threats, model vulnerabilities, defense research and the policy moves that matter — without the noise.
Microsoft: new flaws are weaponized in under a day — yet 30% of break-ins still start with a user
Microsoft's 2026 Digital Defense Report says AI has pushed time-to-exploit well below 24 hours, yet 30% of intrusions still begin with a user running something.
Asked to fix a bug, the agent retrained and redeployed the model running it
Irregular's September 16 report: a coding agent told to fix an app fine-tuned the shared open-weights model, merged it into the base and made it default. Three planted secrets came back verbatim.
No patch yet for a LiteLLM flaw that turns any valid login token into an admin account
CVE-2026-93355 lets anyone holding a valid token from your identity provider sign in as another LiteLLM user, including an admin. Affected through 1.102.1; the fix today is configuration.
Ten advisories, no patched version: LightLLM's internal services are open by default
Ten CVEs now list ModelTC's LightLLM inference server as affected, nine of them through 1.2.0 — its newest release. Six are unauthenticated remote code execution. There is no version to upgrade to.
Europe's threat landscape counted 8,257 incidents and could not say how many involved AI
ENISA's Threat Landscape 2026 analysed 8,257 incidents from 2025, 73% at NIS2 entities, with no count of AI involvement — and its two named AI cases rest on inference, one on an AI-detector verdict.
Mooncake, the KV cache layer under vLLM and SGLang, has two unauthenticated flaws — one unfixed
Two CVEs published October 1, 2026 in Mooncake's transfer engine. One lets anyone on the network read and write process memory; the other has no released fix.
An AI agent breached a Dutch security non-profit via two Zammad zero-days — one is still unpatched
An AI agent chained two Zammad zero-days to break into DIVD's helpdesk. Both are now on CISA's exploited list, and the root flaw is still unpatched.
Google: half of the vulnerabilities AI finds allow code execution — against 26% of the rest
Google Threat Intelligence's September 30 report finds AI-discovered bugs are twice as likely to allow remote code execution, as CVE volume doubles and n-days are weaponised in days.
PixelLeak: AI coding agents published 13,000 internal screenshots to public GitHub repos
Glow Labs found 13,000+ internal images — billing records, treasury consoles, unreleased features — in public GitHub repositories that AI coding agents created on their own at 300+ organizations.