The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

SANS ISC entries report active exploitation and security activity, including an AI-assisted operation harvesting access to poorly secured LLM resale gateways through web flaws and account farming, scanning for vulnerable Proxmox VE servers, a critical exploited MikroTik SSH authentication-bypass vulnerability with persistence via added accounts, and a large September 2026 Microsoft Patch Tuesday addressing 973 vulnerabilities, including exploited issues and critical RCEs. A Redtail payload analysis is also included, but the supplied metadata does not provide technical indicators or specific CV