The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

The feed highlights active exploitation of critical enterprise vulnerabilities, including Cisco Secure Firewall Management Center authentication bypass flaws used to deploy Qilin ransomware, mass exploitation of a SonicWall flaw linked to credential and Active Directory theft, and multiple vulnerabilities added to CISA's Known Exploited Vulnerabilities catalog. It also reports actively exploited Chrome V8 zero-days, nation-state adoption of exploit kits, exposed AI infrastructure and endpoints, AI model extraction campaigns, and risks from insufficiently isolated AI agents and sandboxes.