The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

SecurityAffairs reports widespread active exploitation and exposure across enterprise products, browsers, AI infrastructure, and supply chains. Key incidents include exploitation of critical Cisco Secure Firewall Management Center authentication bypass CVE-2026-20079 to deploy Qilin ransomware, mass exploitation of a SonicWall flaw affecting a UK council, multiple vulnerabilities added to CISA’s Known Exploited Vulnerabilities catalog, and an actively exploited Chrome V8 zero-day CVE-2026-87491. Researchers also identified 36,769 exposed AI endpoints, most lacking HTTP authentication, while AI