The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

SecurityAffairs reports widespread active exploitation and exposure across enterprise, browser, network security, and AI infrastructure. Notable incidents include exploitation of Cisco Secure Firewall Management Center authentication bypass flaws to deploy Qilin ransomware, mass exploitation of a critical SonicWall vulnerability impacting a UK council, multiple actively exploited browser and enterprise vulnerabilities added to CISA’s KEV catalog, and a Chrome V8 zero-day enabling arbitrary code execution. Researchers also identified 36,769 internet-exposed AI endpoints, most lacking HTTP-level