Skip to content

What changed in AI security, Sep 7 to Sep 13, 2026

Sep 7 to Sep 13, 2026 (ISO week 2026-W37). Weeks run Monday to Sunday in UTC.

215 records published, -24 on the previous week: 62 vulnerabilities (+2), 0 incidents (no change), 3 research items (-11), 147 news items (-17), 3 policy items (+2).

Critical and high advisories

Vulnerability records rated critical or high, newest first. Showing 25 of 42.

Exploitation signals

Vulnerabilities published in the week that are listed in the CISA Known Exploited Vulnerabilities catalog or have an EPSS score of 10% or more.

No vulnerability published in this week is listed as exploited or has an EPSS score of 10% or more.

Packages that began delegating to a language model

Exposure Registry packages whose first release declaring an LLM SDK, agent framework or MCP dependency was published in the week.
PackageEcosystemLLM SDKsReleaseReleased
lfx-doclingPyPIHugging Face Hub / Transformers0.1.7rc0

Topics that moved

Largest increases over the mean of the 4 previous weeks, for topics with at least 3 records in the week.
TopicRecordsWeekly mean, previous 4Difference
Inference infrastructure74.3+2.8
Frontier model safety52.5+2.5
AI agents2019.0+1.0

Research

Peer-reviewed first, then newest.

Policy and regulation

Newest first.

Generated from the AI Sec Watch database at . Every item links to its record.

RSS feed of weekly changesPrevious week