🔺 NINJA SIGNAL — Edition 000000002 Housekeeping: last edition I called LLM tooling "the ne

🔺 NINJA SIGNAL — Edition 000000002

Housekeeping: last edition I called LLM tooling "the new soft underbelly" and bet a reader a pint on it.

This week LiteLLM — the model proxy — hit CISA KEV at the 98.33rd EPSS percentile.

I would like my pint.

(NIKO, my editor: You opened by demanding a pint.)
(Me: An institution, Niko.)

━━━━━━━━━━━━━━━━━━━━━━━━━━━

⚡ THE AI SUPPLY CHAIN IS A CVE NOW, NOT A THINKPIECE

▸ CVE-2026-42271 — LiteLLM — KEV, EPSS 98.33 pct. The proxy that holds every model key in the building.
▸ Velocity spike: pip/praisonai (AI multi-agent framework) — z = 7.5. Someone's moving on AI packages right now.
▸ Contagious Interview (DPRK, hires-as-your-dev) sitting at #4 by graph centrality.

Your AI stack is now part of your software supply chain — and it has worse hygiene than the rest of your estate combined. The LLM proxy has every credential. The agent framework runs arbitrary tools by design. Nobody put EDR on it because "it's just the AI sandbox."

It is a domain-joined machine that runs attacker-supplied instructions for a living.

━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔴 KEV THIS WEEK — THE EDGE AND THE AI LAYER

▸ CVE-2026-42271 LiteLLM — 98.33 pct
▸ CVE-2026-7473 Arista EOS (the switches) — 95.96 pct
▸ CVE-2026-50751 Check Point Security Gateway — 93.88 pct
▸ CVE-2026-28318 SolarWinds Serv-U (managed file transfer — we've BEEN here) — 92.17 pct
▸ CVE-2026-11645 Chromium V8 — 90.40 pct

Initial-access brokers pivoted from phishing-the-user to owning-the-appliance. Edge devices have no EDR and sit on the trust boundary. They are the new email attachment.

━━━━━━━━━━━━━━━━━━━━━━━━━━━

📈 VELOCITY — RUNDLL32 IS HAVING A MOMENT

Rundll32 (T1218.011): +86 new edges in one window, z = 6.1. Eighty-six campaigns/samples suddenly proxying execution through one LOLBin in a week = somebody published a technique and everybody copied it.

Plus z=7.7 spikes: Scheduled Task · Masquerade Account Name · Web Protocols.

(NIKO: "Fashion trend" is not a threat-intel term.)
(Me: T1218.011 is having a moment, Niko.)

━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔮 7-DAY FORECAST

1. Another AI-infra CVE (proxy / vector DB / agent framework) on KEV inside 10 days.
2. The Rundll32 surge precedes a named-malware "now uses rundll32 proxy execution" write-up.
3. One of this week's edge CVEs (Arista / Check Point / Cisco) gets chained to pre-auth RCE before Tuesday.

━━━━━━━━━━━━━━━━━━━━━━━━━━━

Graph state: 7,896,193 nodes · 48.7M edges · 441,321 indicators · cross-domain now (threat intel correlated against sentiment + entities + markets).

Full edition + Rundll32 KQL detection + receipts in the comments 👇

(Niko is still waiting for me to expense the pint.)

— Scott | ninja.ing | @scottg