AI Sec Watch

A vulnerability (CVE-2026-9540) was found in vllm version 0.19.0 that affects the OpenAI-compatible Serving Path component and can be exploited remotely to cause a denial of service (making a service unavailable by overwhelming it). The vulnerability has a CVSS score (a 0-10 rating of how severe a vulnerability is) of 5.5 (medium severity), and a public exploit is already available.

The Megalodon campaign used compromised credentials to inject malicious commits into over 5,500 GitHub repositories, modifying GitHub Actions workflows (automation tools that run code tasks) to steal sensitive secrets like cloud credentials and SSH keys (authentication files). The attack hid malicious code in base64-encoded bash payloads (encoded script commands) and used fake author names like "build-bot" to disguise itself as routine maintenance, with researchers detecting unexpected workflow runs as a warning sign.

Varonis Atlas has integrated with the Claude Compliance API to help organizations monitor and secure their use of Claude Enterprise and Claude Platform, which are AI tools used for tasks like document analysis and building custom applications. The integration allows security teams to track AI usage, detect misuse and sensitive data exposure, investigate complete chat sessions, and test for vulnerabilities like prompt injection (tricking an AI by hiding instructions in its input) and jailbreaks. Varonis Atlas connects AI activity to underlying data permissions and access controls to help organizations understand what data their AI systems can reach and whether that access is safe.

Google CEO Sundar Pichai discusses major AI changes coming to Google Search and YouTube, including new Gemini models (advanced AI systems for generating text and understanding information) and AI agents that can perform tasks rather than just deliver search results. These changes will likely reduce traffic to websites from Google Search, a phenomenon the interviewer calls 'Google Zero,' forcing publishers and content creators to adapt their business strategies.

Check Point launched a proactive Frontier AI Models Readiness Program to protect their products against threats from increasingly capable AI systems that could help attackers find and exploit vulnerabilities. The program involved scanning their code with AI tools, reviewing security, strengthening weak components, and speeding up their ability to create and release security patches.

This article discusses the competitive race between Elon Musk's SpaceX and Sam Altman's OpenAI as both companies move toward initial public offerings (IPOs, which is when a private company sells shares to the public for the first time). The piece highlights how a small group of tech leaders is gaining increasing influence over the future direction of artificial intelligence development.

Anthropic announced that Claude now integrates with 28 enterprise security and compliance platforms, allowing organizations to monitor and govern Claude's use alongside other workplace software. The integration works through the Claude Compliance API, which gives security teams access to conversation content and activity logs from Claude Enterprise, enabling them to apply their existing monitoring policies to Claude.

The TrapDoor malware campaign compromised over 34 malicious packages across npm, PyPI, and Crates.io (popular code repositories where developers download libraries) to steal developer secrets like AWS credentials, GitHub tokens, and SSH keys (authentication credentials for secure systems). The campaign is particularly dangerous because it targets entire developer workflows, including AI coding assistants, and uses normal software development processes as cover, making it harder to detect and potentially giving attackers access to CI/CD pipelines (automated systems that build and deploy software) and cloud infrastructure.

Uber has spent its entire annual AI budget in just four months of 2026 and is questioning whether the spending is worthwhile, as the company struggles to see a clear connection between rising token consumption (the computational cost of running AI models like Claude Code) and actual improvements in features delivered to customers. Uber's president says it's difficult to prove that increased AI spending is directly producing more useful features for consumers.