Weekly Cybersecurity Recap: AI-Powered PLC Attacks, GitLab Compromises, and Stripe Key Exposure

The cybersecurity landscape this week was characterized by a convergence of trends: AI-powered attacks becoming more accessible, trusted development tools and platforms being compromised, and old vulnerabilities receiving fresh attention. In the PLC space, security researchers demonstrated how AI could lower the technical barrier for threat actors targeting industrial control systems, potentially enabling more widespread disruption of critical infrastructure. Separately, GitLab instances were targeted in campaigns involving credential theft and unauthorized access, highlighting the need for robust secrets management and access controls. A significant incident involved the exposure of Stripe API keys, underscoring the risks of mishandled cloud credentials. Beyond these headline events, the recap noted that trusted tools, including development packages, were being installed and turning hostile, with internet-exposed systems remaining prime targets for initial access. The overall theme suggests that as AI lowers the cost of exploit development, the volume and variety of attacks across different vectors is increasing, requiring heightened vigilance from organizations across all sectors.