AI Infrastructure
AI infrastructure explores GPUs, compute, training, inference and large-scale deployment. Articles follow platform evolution, architectural bottlenecks and the security implications of AI workloads.
Langflow Under Attack: MCP Servers Become Vector for Authenticated RCE
CVE-2026-105740 in Langflow has triggered 1,423 exploit attempts on a honeypot. The attack mechanism exploits opaque MCP server config…
Zero-Day RCE in Genesis World: ZDI Publishes Advisory With No Patch Available
TrendAI Zero Day Initiative disclosed ZDI-26-756, a zero-day deserialization vulnerability in Genesis World that enables remote code e…
AI Agent Re-grades 10,000 Cloud Alerts: Three-Quarters Had the Wrong Severity
Sola Security study of 9,967 HIGH findings: 58.5% downgraded, 16.6% upgraded. Static CSPM vendor severities do not reflect real risk i…
1,280 Third-Party AI Agents, 1,000 Invisible to Security Systems
One in five enterprises runs third-party AI agents with no visibility into their identities or permissions. Standard procurement proce…
NVIDIA DCGM Bug: 2,100 GPU Servers Exposed, Unauthenticated DoS
CVE-2026-47483 hits NVIDIA GPU monitoring: 2,100 internet-exposed servers, 12,000 GPUs vulnerable to DoS via /debug/pprof endpoint. Th…
Shai-Hulud Worm Hits Tensorlake: AI SDK Turned Attack Vector
The npm package tensorlake@0.5.144 was compromised by the Shai-Hulud worm. Installing the AI SDK executes malware with a valid provena…
PoeLLM: The Malware Hiding C2 Servers in a GitHub Poem
The PoeLLM botnet has compromised over 3,400 AI servers by exploiting CVE-2026-42271. Command-and-control addresses are concealed in a…
The First Wave of Agentic Attacks Is Already Loud
"The age of AI agents executing cyber attacks is already here." With those words on October 7, 2026, Cisco Talos Intelligence opened a…
Pwn2Own Ireland 2026: 32 Zero-Days, $388,500 on Day One
Researchers exploited 32 zero-day vulnerabilities for $388,500 in prizes on the opening day of Pwn2Own Ireland 2026. The Samsung Galax…
Dell System Update Critical 9.6 Bug Opens PowerEdge Servers to Remote Root
A path traversal vulnerability in Dell System Update allows unauthenticated remote code execution with root privileges. Version 2.3.0.…
ThreatsDay: When Mundane System Operations Become Weapons
The October 1, 2026 ThreatsDay bulletin maps 16 stories that turn ordinary operations into attack vectors. The real risk is the banali…
GitLab Patches Critical RCE in AI Gateway: Self-Hosted Deployments at Risk
CVE-2026-90970, rated CVSS 9.9, allows authenticated users with Duo Agent Platform access to escape the prompt template sandbox and ex…