Threat intelligence editor

Alex Kim

Articles: 235
Desks: 7

Focuses on cloud identity, incident response, and exploitation trends.

CloudIncident responseIdentity

Coverage by Alex Kim

Data graphic: OpenAI notified more than 100 organizations as of Sept 26 about activity by its models, with the stamp 'Notice, not proof of compromise'.

OpenAI Notified 100+ Organizations About Model Activity: A Notice Is Not a Compromise

OpenAI says it notified 100+ organizations about model activity; a notice isn't proof of compromise. What it counts, what others count, what to check.

Oct 7 · 8 min

Data graphic: OpenAI's API usage tiers drop from five to three, and the top tier, Grow, now needs $500 in total purchases, down from $1,000 for the old top tier. Grow's monthly limit is $200,000.

watchResearch Ai Api Pricing

OpenAI Collapses API Usage Tiers From Five to Three: Grow Unlocks $200,000 a Month at $500

OpenAI's API now has three paid usage tiers, Build, Launch and Grow. Grow needs $500 in total purchases, down from $1,000, and keeps its $200,000 monthly limit.

Oct 6 · 5 min

Data graphic: Mistral Large 4 Preview scores 81.7% on CyberGym-E2E-AA, first of 18 on Artificial Analysis's leaderboard, but 5th of 18 on the composite Cyber Index 49.5 .

elevatedAI Security Mistral

Mistral Large 4 preview ships a reduced-moderation cyber tier, and Artificial Analysis lists its 82% as the top score

Mistral Large 4 is in preview, with vetted partners and states getting a reduced-moderation cyber tier. Artificial Analysis lists its 82% CyberGym score as the top of 18 models.

Oct 6 · 6 min

Poster: NextChat proxy SSRF CVE-2026-105238, CVSS 3.1 7.3 High, no fix, PR #6884 not merged

watchAI Security Cve 2026 105238

NextChat proxy fallback lets unauthenticated callers make the server fetch any URL (CVE-2026-105238)

NextChat 2.16.0 and 2.16.1 let anyone make the server fetch any URL through the x-base-url header. A public PoC exists and the fix is still an open PR.

Oct 6 · 7 min

Data graphic: cover for the Dify CVE-2026-105762 story, a huge 8.3 CVSS 3.1 High score; 1.13.0 is the fix and no exploitation has been reported.

highAI Security Ssrf Vulnerability

Dify CVE-2026-105762: Unauthenticated SSRF in Remote-File Upload Reaches Internal Services and Cloud Metadata

Dify before 1.13.0 let unauthenticated callers make the server fetch any URL via its remote-files routes. Upgrade, restrict egress, enforce IMDSv2.

Oct 6 · 5 min

CVSS 9.9 rating for Langflow MCP stdio command-injection flaws, fixed in 1.10.3; no exploitation reported, not in CISA KEV.

highAI Security Langflow

Langflow MCP Stdio Flaws Give Any Logged-In User a Shell: CVE-2026-105697 and CVE-2026-105740

Two CVSS 9.9 command-injection flaws in Langflow's MCP stdio transport let a low-privileged user run host commands. Fixed in 1.10.3; no exploitation reported.

Oct 5 · 5 min

CVE-2026-104019 SageMaker Distribution: CVSS 3.1 9.0 CNA-scored and 4.0 9.3, no workaround, seven fixed lines, no exploitation reported.

highAI Security Cve 2026 104019

AWS Patches Critical SageMaker Distribution Flaw That Lets a Project Contributor Hijack Another User's Studio Space

AWS disclosed CVE-2026-104019 on 2 October 2026 (bulletin 2026-125-AWS), an OS command injection in the Studio Space startup validation script of Amazon SageMaker Distribution as used by SageMaker Unified Studio. An authenticated project contributor can run commands in another project member's Space and take that member's temporary execution role credentials. The CNA scores it 9.0 (CVSS 3.1) and 9.3 (CVSS 4.0). AWS lists no workaround, and two older release families get no fix. We found no report of exploitation.

Oct 5 · 5 min

Loom for AWS before 1.6.1 trusted any network client as super-admin when no identity provider was configured CVE-2026-103956 : unauthenticated client, backend with no IdP, fixed super-admin identity, agent control plane. Fixed in 1.6.1 and 1.7.0.

highAI Security Aws Loom

AWS fixes Loom flaw that gave any network client admin rights on deployments without an identity provider

AWS Loom before 1.6.1 treated every client as super-admin with no identity provider set (CVE-2026-103956). Upgrade to 1.9.0; 1.7.0 fixes two SSRF flaws.

Oct 5 · 7 min