Return to Threats

In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure

securityweek.com 2026-09-25 AI agent abuse Critical

Executive Summary

A roundup including a Clop leak site takeover, a Docker botnet hunting AI keys, water utility exposure, the BragJack attack against browser AI assistants and a TDengine flaw.

What Happened

Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul. The post In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure appeared first on SecurityWeek .

Affected Products

  • Docker
  • TDengine

Vulnerability / Attack Technique

Multiple, including theft of AI API keys and attacks on browser AI assistants

Technical Mechanism

The summary lists stories without technical detail.

AI Security Category

LLM02:2025 Sensitive Information Disclosure

Relevant Frameworks

LLM02:2025 Sensitive Information Disclosure

RealGround Analysis

Two of the items target AI directly: botnets hunting AI keys and an attack on browser assistants. RealGround analysis: AI keys and browser assistants are now routine targets.

Recommended Controls

  • Monitor and rotate AI API keys
  • Review browser AI assistant permissions

Related RealGround Service

AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.

Sources

securityweek.com: https://www.securityweek.com/in-other-news-clop-leak-site-takeover-docker-botnet-hunts-ai-keys-water-utility-exposure/

Summary and analysis written by RealGround from the source above; last updated 2026-10-17.

Talk to AI CISO