Security Researchers Sound the Alarm on Vulnerabilities in AI-Generated Code

News roundup highlights an acceleration in exploitation and supply‑chain attacks: researchers warn AI‑generated code is introducing new CVEs, attackers are weaponizing critical RCEs (Oracle WebLogic, Langflow, Citrix NetScaler, Cisco zero‑day) within hours/days of disclosure, and supply‑chain compromises (LiteLLM PyPI, Trivy Docker images, npm Ghost campaign) are delivering infostealers and credential stealers. Other notable trends: EtherRAT using Ethereum smart contracts for C2, resurgence of Iranian-linked Pay2Key ransomware, mass abuse of legitimate credentials at scale, rise of malicious ‘