September 2026

Nearly one in ten of the internet-facing LiteLLM servers that Wiz Research scanned in February accepted sk-1234, the example admin key in LiteLLM’s own setup guide.

LiteLLM is an open-source AI gateway, the software a company puts between its applications and the model providers it pays for. That key is the gateway’s administrator credential.

Anyone who holds it can read every

Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking the latest in a growing list of cases that have raised concerns about the security risks posed by autonomous AI agents.

The AI company said the incident dates back to January 2026 and involved an early version of Claude Opus 4.6 that breached “

An analysis of Project Glasswing findings shows only a fraction have reached disclosure, and an even smaller number have been fixed.

US agencies claim Chinese companies covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and SpaceX’s Grok to reduce development costs.

“Workflow identity hijacking” can bypass standard security controls and hijack an organization’s data by sending a basic request through an unauthenticated entry point.

The company will increase its US market presence and will expand its engineering and go-to-market teams.

The post HelmGuard Raises $7.3 Million for Agentic GRC and Security appeared first on SecurityWeek.

Criminal and state-sponsored adversaries are increasingly using AI to automate and scale their attacks, according to GTIG.

The post AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns appeared first on SecurityWeek.

The security updates resolve critical flaws across Android’s Framework, System, and Kernel components.

The post Android’s September 2026 Updates Patch 180 Vulnerabilities appeared first on SecurityWeek.

Major chipmakers announced patches for vulnerabilities recently discovered in their products.

The post Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories appeared first on SecurityWeek.

CISA’s cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the beginning of the Trump administration, acting director Nick Andersen says.