GPUStack security advisory GHSA-gj9m-f8ph-pmhr: authentication bypass via spoofed loopback requests (CVE-2026-102895)

GPUStack security advisory

This story is part of the morning brief One operator ran a 12-agent AI attack mesh against hundreds of targets in 11 countries, plus a wave of stolen AI keys. The reporting lives at the original source.

Read at GPUStack security advisory

Acronis tore down BOSSAI, a lone attacker's mesh of AI agents wired to MCP servers. The bugs it hit were old ones. Meanwhile AI developer platforms keep losing customer API keys, and Binance explains how a fake job interview led to a $6.34 billion theft.