ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

This week's security digest highlights how AI is accelerating both attacks and discovery, and how ordinary infrastructure keeps becoming an attack vector. Attackers reportedly used an automated AI agent to chain two Zammad ticketing system zero-days, CVE-2026-102489 and CVE-2026-102490, breaking into the Dutch Institute for Vulnerability Disclosure (DIVD), hijacking sessions and escalating from a regular user to root in seconds, exposing volunteer data in the process. Separately, Truffle Security uncovered 543,699 still-valid credentials sitting exposed in public GitHub repositories, some dating back to 2009, despite the platform's push-protection safeguards. Pillar Security also disclosed a critical flaw in Unsloth Studio, an open-source LLM fine-tuning tool, where merely inspecting a model's metadata in the UI could trigger automatic execution of malicious Python code from its Hugging Face repository, risking theft of tokens, keys and training data; the issue was fixed in version 2026.6.9. The roundup also covers U.S. Treasury sanctions against a Tren de Aragua-linked ATM jackpotting network tied to Chainalysis-tracked crypto laundering, plus research from Tracebit and YesWeHack on prompt-injection defenses and web cache-key poisoning techniques.