Thursday, and today's three stories share an uncomfortable premise: the things you installed to be safe — the AI gateway, the trusted recruiter, the firewall — are the things that broke. Not exotic nation-state magic. The soft parts you already let inside.
The AI plumbing leaked everyone's secrets
Start with the tool you adopted to move faster. A supply-chain compromise of LiteLLM — the widely used open-source gateway teams put in front of their AI stack to route calls across providers — has spilled a trove of credentials into the open. 153GB of stolen credentials surfaced after the LiteLLM supply chain attack, and the fallout list is not small names: secrets belonging to AWS, Cisco, Samsung, and more than 2,500 other organizations were exposed. This is the same class of gateway breach that Wednesday's roundup flagged as a major supply-chain incident touching over 2,500 companies.
The operator's take: the AI middleware you bolted on last year is now part of your attack surface, and it holds the keys to everything downstream — cloud accounts, API tokens, provider secrets. A proxy that sees every model call also sees every credential you feed it. Inventory what your LLM gateway can access, rotate anything it has touched, and treat "convenient AI plumbing" as a privileged system, not a dev-tool afterthought. Least privilege is not just for humans anymore.
Lazarus turns a dream job into a zero-day
Next, the human you trusted. North Korea's Lazarus Group has been caught chaining social engineering to a fresh Windows bug. Check Point Research attributes the group to zero-day exploitation of a newly patched Windows flaw to deliver a never-before-seen backdoor at defense and aerospace firms across France, Germany, Brazil, and India. The vehicle is the long-running Operation Dream Job playbook — fake-but-convincing job offers at firms like Lockheed Martin, dangled over LinkedIn to build trust before the payload lands. The exploited flaw is CVE-2026-68820 (CVSS 7.0), a privilege-escalation bug in the Windows AFD.sys WinSock driver that Microsoft patched in this week's update — and researchers frame it plainly: Lazarus turns dream jobs into zero-day traps.
The operator's take: your best engineers are the target precisely because they take recruiter calls. The entry point wasn't a firewall gap; it was a plausible message and a curious click. Pair fast patching of the WinSock privilege-escalation flaw with the boring human control that actually stops this: out-of-band verification of anyone recruiting your technical staff, and endpoint controls that assume a trusted-looking file is hostile until proven otherwise.
Even the firewall went down
And finally, the box you bought to keep the others out. Cisco patched CVE-2026-20349, a vulnerability being exploited to knock its own firewalls offline, and the exposure is broad: it can be triggered remotely, without authentication, against Secure Firewall ASA and FTD devices. No credentials, no foothold — just a reachable device and a crafted request that takes the perimeter down.
The operator's take: a denial-of-service against your edge firewall isn't a data-theft headline, but it's an availability event that can mask something worse or simply stop the business cold. Anything internet-facing and unauthenticated is a first-priority patch — the ASA and FTD fleet, today, not at the next change window. And if your edge is a single vendor's single box, an outage there is an outage everywhere; redundancy at the perimeter is now a resilience question, not a nice-to-have.
Also on my radar
- The phone shipped its AI. Google launched the Pixel 11 line on the new Tensor G6, starting at $899, with availability on August 20 and a heavy lean into on-device AI — the operator angle is that more of your employees' AI now runs in their pockets, off your network entirely.
- The floods keep getting bigger. DDoS campaigns are hitting record scale, with 1 Tbps-plus attacks becoming more common — the Cisco firewall story above is a reminder of what those volumes hit first.
- Vibe coding keeps raising. Lovable pulled in $400 million at a $13.3 billion valuation — investors are still betting the natural-language software market supports multiple giants, not one winner, which is good news for buyers keeping their options open.
The throughline for a Thursday: trust is the attack surface. The AI gateway you adopted, the recruiter your engineer answered, and the firewall you deployed to stop all of it — each was a place you extended trust, and each is where today's damage came through. The operator's job isn't to trust less; it's to verify more and blast-radius everything: least privilege on your AI plumbing, out-of-band checks on your people, and fast patching plus redundancy at the edge. That's the Signal for today.
Paul Sapio is the CIO of Mikhail Education and a full-stack AI engineer. Open to contract work in security, networking, AI, and SaaS development — reach out.