The US Cybersecurity and Infrastructure Security Agency (CISA) is discontinuing its monthly vulnerability bulletin starting September 28, according to CSO Online, citing an unprecedented volume of AI-…
GreyNoise Intelligence reported on September 9 that a single attacker using hundreds of AI agents compromised 440 PaperCut NG/MF servers across 395 organizations in 48 countries on August 31, with 11 …
A joint advisory from the NSA, CISA, the FBI, the Department of Energy and the EPA warns that threat actors are using AI tools to generate functional Python exploitation scripts against internet-expos…
Cohere CEO Aidan Gomez told CNBC on September 10 that China's AI progress is genuinely innovative rather than merely distilled from American models, pointing to Chinese GLM models processing roughly 1…
A security checklist published in response to the September 2026 CISA Known Exploited Vulnerabilities wave warns that patching AI and workflow tooling such as BerriAI LiteLLM, the Kestra orchestrator,…
CISA added CVE-2026-59822, an authentication bypass in LiteLLM's Model Context Protocol handler, to its Known Exploited Vulnerabilities catalog on September 2, 2026, making it the first MCP-related fl…
Five U.S. federal agencies — the NSA, CISA, the FBI, the Department of Energy, and the EPA — issued a joint advisory (AA26-231A) warning that threat actors are using AI-generated code to build exploit…
A security analysis found that LiteLLM, an AI gateway tied to CVE-2026-59822 (CVSS 8.8), had 34,412 internet-facing deployments, while workflow orchestration platform Kestra, affected by CVE-2026-4986…
US export-control restrictions imposed on Anthropic and OpenAI have pushed cybersecurity professionals toward less-restricted Chinese AI models, with Hugging Face turning to Zhipu AI's GLM-5.2 in July…
The US Cybersecurity Infrastructure and Security Agency (CISA) will discontinue its weekly bulletin of known vulnerabilities on September 28, citing the recently introduced Binding Operational Directi…
Wiz Research found that a one-character Bearer token ("Bearer a") bypassed authentication in LiteLLM's Model Context Protocol gateway, tracked as CVE-2026-59822, after 90 days of honeypots mimicking A…
A security measurement found 33,005 internet-reachable LiteLLM gateway instances following CVE-2026-59822, an authentication bypass in LiteLLM's MCP Streamable HTTP endpoint that was fixed in version …
A joint cybersecurity advisory, AA26-231A, issued in August 2026 by the NSA, CISA, the FBI, the Department of Energy, and the EPA, warned that threat actors are using internet scanning services to loc…
A critical authentication bypass in LiteLLM's MCP Streamable HTTP endpoint, tracked as CVE-2026-59822, allowed unauthenticated callers to list and invoke gateway-configured MCP tools by sending a forg…
The National Institute of Standards and Technology (NIST), with help from the Cybersecurity and Infrastructure Security Agency (CISA), released NIST IR 8587, "Protecting Tokens and Assertions from For…
Security researchers disclosed CVE-2026-48710, dubbed BadHost, an authentication bypass in the Starlette ASGI framework caused by inconsistent parsing of malformed Host headers. The flaw, affecting St…
Chinese robotics startup JoyIn accused OpenAI of distilling its AI systems and copying its website's cosmic design aesthetic for the GPT-6 Astra launch, with CEO Guo Renjie saying the company has begu…
Y Combinator CEO Garry Tan told CNBC at YC's Demo Day that U.S. regulators should "do nothing" about AI model distillation, saying American open-weight labs should learn from frontier systems through …
Anthropic's September 10, 2026 threat intelligence report documented approximately 200 million exchanges across five distillation campaigns by seven China-based labs, with Alibaba's Qwen team accounti…
The NSA, CISA and FBI on Tuesday accused six Chinese AI firms — DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI — of running large-scale knowledge-distillation campaigns against US frontier …