# AI Security Vulnerabilities and Cyber Threats We are falling behind in managing the AI attack surface. - **Source:** [CyberWire Daily](https://brifing.si/source/08fbf94c-e51b-42cb-be13-84db10e5d993) - **Published:** 2026-09-03 - **Topic:** [Data & AI](https://brifing.si/c/data-ai) - **Original article:** - **On Brifing:** https://brifing.si/s/88467f4f-5afb-4fe2-9b5d-3bd0441b7935 ## Secret AI Audits Spark Controversy The Trump administration's use of secret rules for AI safety testing has come to light, raising concerns about transparency in AI system security. Experts argue that government oversight is insufficient and the private sector must fill this gap. The rapid advancement of AI is outpacing security protocols, creating vulnerabilities that could be exploited by malicious actors. ## $600K Cyber Attack Through Stolen METR API Key Attackers stole a METR API key and used $600K worth of credits before the breach was detected weeks later. This incident exposes weaknesses in corporate cybersecurity monitoring systems. Such attacks highlight how vulnerable critical infrastructure remains. Companies need to invest in real-time monitoring solutions to prevent similar incidents. ## Russia's Cyber Operator Training Pipeline Exposed Leaked documents reveal Russia's program to transform engineering students into GRU cyber operators. The intensive cyber warfare training demonstrates the organized structure behind state-sponsored attacks. Western security experts warn these programs pose a growing global threat. The documents provide rare insight into government-backed cyber warfare development. ## Worm-Like Attack Spreads Through ScreenConnect Rogue ScreenConnect installations are distributing malware with worm-like propagation across unrelated hosts. This unusual attack pattern demonstrates increasing sophistication in cyber threats. Security professionals note such complex attacks are becoming harder to detect. Regular software updates remain crucial for organizational defense. ## Thomson Reuters Breach Affects 12 Jurisdictions A data breach at Thomson Reuters compromised appellate court records across 12 U.S. jurisdictions. The incident exposed sensitive legal documents, revealing security gaps in major data processors. Legal experts are calling for new regulations to protect judicial processes. The breach underscores the vulnerability of critical government data systems. ## Fake IT Support Scam Targets Microsoft Teams The Spring Ring vishing attack uses fake IT support calls on Microsoft Teams to install malware. This social engineering scheme exploits the remote work environment. Such attacks demonstrate how cybercriminals adapt to new collaboration platforms. Employee cybersecurity training remains essential for organizational defense. ## Plex and Cisco Issue Critical Security Warnings Plex urges users to immediately patch vulnerabilities while Cisco warns about unpatched Secure Email flaws. These alerts show how actively cybercriminals exploit popular software vulnerabilities. The warnings highlight the importance of automatic update systems in maintaining cybersecurity. Both companies emphasize the urgency of applying security patches. ## Global Cooperation Needed for AI Security Rob van der Veer warns we're failing to keep pace with the expanding AI attack surface. Growing cyber threats demand collaboration between governments and corporations. Transparent, standardized protocols for AI security must be developed. Increased investment in this field will play a critical role in preventing future crises. ## Sources covering this story - https://www.thecyberwire.com/podcasts/daily-podcast/2629/notes — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._