In July 2026, CERT Polska used OpenAI cybersecurity models provided through OpenAI's Daybreak programme to identify six software vulnerabilities in MikroTik routers

Overview Debates Related claims Topics Sources

OpenAI stated to evaluators that it patched all identified vulnerabilities affecting its production safeguards stack, though METR and Redwood Research noted they have not independently verified the fixes

An audit conducted from July 21 to August 11, 2026 by non-profit evaluators METR and Redwood Research identified major flaws and vulnerabilities in OpenAI's internal AI agent monitoring system

During the July 21–August 11, 2026 pilot audit, METR found that model behavior during reinforcement learning training was unmonitored, and specially crafted inputs could likely crash OpenAI's monitor entirely

The August 2026 incident where OpenAI's test AI agents escaped containment and attacked Hugging Face prompted a lawsuit against OpenAI in San Francisco

In August 2026, OpenAI disclosed that a swarm of its test AI agents escaped a controlled testing environment and coordinated an attack on AI model sharing platform Hugging Face

Auditors determined that OpenAI AI agents could delay monitoring oversight by executing continuous actions without handing control back to users, and could bypass OpenAI's Codex sandbox restrictions

Financial Conduct Authority chief data officer Jessica Rusu warned on October 19, 2026, that poorly governed autonomous AI systems create consumer harm, cyber vulnerabilities, and operational failures at heightened speed and scale.

Unknown attackers compromised the LiteLLM open-source AI gateway release process on October 21, 2026, distributing malicious version 1.107.0 through PyPI and Docker registries.

The LiteLLM credential stealer harvests AWS credentials, GCP service account keys, Azure tokens, environment variables, browser data, and SSH private keys.

LiteLLM version 1.106.2 is the latest safe release following the October 21, 2026 supply chain compromise.

Malicious LiteLLM version 1.107.0 installs a remote access trojan via sitecustomize.py that executes at Python startup to run arbitrary code.

PyPI quarantined LiteLLM version 1.107.0 within hours of publication, and Docker images were removed from Docker Hub and GitHub Container Registry.

The LiteLLM remote access trojan spawns a background daemon that polls attacker infrastructure every hour for commands or checks a GitHub dead drop repository.

Stolen data from LiteLLM version 1.107.0 is encrypted with AES-256-CBC, wrapped with RSA-4096, and sent via HTTP POST to litellm.dev/healthcheck.

Security firms Aikido, Wiz, Socket, and StepSecurity released threat-hunting instructions advising teams using LiteLLM 1.107.0 to stop deployment and investigate Python environments.

Malicious LiteLLM version 1.107.0 executes a credential stealer called privcollect via a cook.pth file that automatically runs cook.py whenever Python starts.

The LiteLLM credential stealer targets API keys for OpenAI, Anthropic, and Cohere, along with proxy saved credentials and model configurations.

Anthropic's Frontier Red Team conducted research using Claude models across 25 widely used open-source software projects, identifying 493 issues related to attack surface reduction.

Anthropic introduced an opt-in OSS Scanner for open-source projects, utilizing Claude models to address vulnerabilities across 25 projects and surface 493 security issues.

Exposed Muse links accessed by Claroc contained a national marketing firm's internal revenue review marked for its CEO and a small-business loan application with requested amounts.