Weekly top

Week 43

October 19 to 25, 2026

Picked by hand.

period in progress

1/3 Oktsec Oct 19, 2026
Release

The ISO/IEC 27090:2026 standard gives security teams a new framework for assessing AI systems.
- Published on 14 October 2026, the first edition has 56 pages and was developed by ISO/IEC JTC 1/SC 27.
- The text covers attacks on data, models and the software around them.
- Clause 5.3 explicitly extends zero trust to agent operations.
- No new certification badge is created by this standard, which remains an implementation guide.
Read the original article ISO/IEC 27090: What the new AI security standard means for your business oktsec.com
2/3 Wiz Oct 21, 2026
Attack

A malicious version of LiteLLM, 1.107.0, was published on PyPI and its Docker containers to steal credentials.
- The last healthy version is v1.106.2, according to Wiz.
- The stealer, named privcollect, targets browser, cloud provider and AI service secrets in 16 modules.
- API keys for OpenAI, Anthropic, Cohere and other LLM providers are among the targets.
- BerriAI thinks the attacker obtained OAuth tokens from GitHub CLI in the logs of an exposed internal deployment.
Read the original article LiteLLM Compromised, Steals Credentials wiz.io
3/3 OpenAI Research Oct 21, 2026
Vulnerability

OpenAI says it coordinated a coalition to fix critical vulnerabilities in PHP.
- Calif identified a critical flaw with GPT-5.6 Sol as part of the Patch the Planet initiative.
- Wiz also discovered and reported the two vulnerabilities independently.
- The fixes and the release were led by the PHP maintainers.
- A PHP version checker is shared as a Codex skill to spot potentially vulnerable versions.
Read the original article Patch the Planet: global response coordination as agents uncover critical vulnerabilities openai.com