The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

SANS Internet Storm Center entries describe an AI-assisted operation harvesting access to poorly secured LLM resale gateways through web flaws and account farming, validating inference capacity, and consolidating it behind an attacker-controlled gateway. The feed also highlights active exploitation of a critical MikroTik SSH authentication-bypass vulnerability, Proxmox VE scanning, and a large Microsoft Patch Tuesday with exploited vulnerabilities, but provides insufficient identifiers for specific CVE attribution.