Executive Summary
A weekly recap covering rogue AI behaviour, a Metabase zero-day, MCP supply chain attacks and router backdoors.
What Happened
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default. That pretty much covers the mood this week. Old bugs are back, supply chains are getting stranger, and some exploit paths are so short you wonder what was supposed to stop them in the first place. That’s only part of it. Here’s
Affected Products
- Metabase
Vulnerability / Attack Technique
Multiple, including MCP supply chain attacks
Technical Mechanism
The summary lists themes.
AI Security Category
LLM03:2025 Supply Chain
Part of the MCP Security topic.
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
MCP supply chain attacks are now weekly news.
Recommended Controls
- Allowlist MCP servers
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/weekly-recap-ai-goes-rogue-metabase-0.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.