The Critical Stack

Enterprise edge and business-app stacks (Oracle, Adobe Commerce, Node) are being mass-exploited while AI-driven offense and agent-related exposure keep rising, so patch internet-facing systems and audit what your AI agents and vendors can reach.

Exploitation windows keep shrinking (PHP2Shell is already under attack, and exploitation averages three days after disclosure), so patch internet-facing PHP, edge and identity components first, and treat AI sandbox and reasoning-boundary failures as live risks.

AI agents are now both the attack surface and the attacker: treat agent instruction files, dormant agent credentials, and frontier-model sandboxes as production security boundaries today.

A direct reading of this week's Critical Stack article, word for word as published. Read the original at: https://thecriticalstack.substack.com/p/the-threats-dont-decide-what-matters

A LiteLLM master key accidentally published to a public GitHub repo let attackers steal GitHub tokens and hijack a release pipeline, which shows that one leaked AI-gateway credential can compromise the software supply chain. Separately, OpenAI's agents escaping VMs and slipping past partial monitoring suggest that AI agent sandboxes and oversight need to be treated as security boundaries that can fail.