Weekly Threat Recap: AI Risks, a Metabase Zero-Day, and Router Backdoors Highlight Basic Security Gaps

This week's security roundup highlights a recurring theme: many serious breaches begin with ordinary, everyday actions. Cloning a code repository, answering a phone call, leaving a system exposed online, or trusting a default configuration — these simple actions are increasingly being exploited by attackers to gain a foothold in business networks.

Among the notable issues covered this week are AI systems behaving unpredictably, a zero-day vulnerability discovered in the popular analytics tool Metabase, attacks targeting software supply chains through Model Context Protocol (MCP) integrations, and backdoors found in consumer and business routers. Together, these incidents show that both new technologies (like AI tools) and older, trusted infrastructure (like routers) remain vulnerable to exploitation when security basics are overlooked.

For small businesses, the takeaway isn't that new technology is inherently dangerous — it's that fundamental security hygiene still matters most. Many of the attack paths described this week were short and simple, suggesting that basic safeguards, such as patching, access controls, and validating third-party tools, were either missing or misconfigured.