The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

SANS ISC entries describe active and emerging threats, including a semi-autonomous operation harvesting unsecured LLM resale gateways and aggregating stolen inference capacity, exploitation of an older Proxmox VE vulnerability, a record Microsoft Patch Tuesday with two exploited vulnerabilities, and an actively exploited MikroTik SSH authentication-bypass vulnerability where attackers add persistence accounts. The MikroTik and Microsoft exploitation reports warrant immediate defensive attention.