GitGuardian

Headlines · 1

1. Oct 10
   AI-era attacks outpace defenses as GPU hijacking and agent exploits surge

   A Caixin feature (via 36Kr) pulls together GitHub records and multiple security-vendor reports to argue AI-era attacks are now minute-scale, automated and cheap: a ComfyUI server whose admin endpoint had no login was remotely fitted with a plugin that pushed two Nvidia Quadro RTX 6000 GPUs to full load for mining. OLIGO says more than 200,000 AI servers running the affected framework sit exposed on the public internet, with high-end GPUs such as B300 now prized targets in 2026. Anthropic's Frontier Red Team reported in June 2026 that its unreleased Claude Mythos Preview produced a first working Windows kernel exploit in 31 minutes and covered 18 of 21 patched vulnerabilities within six hours for $15,700 in API spend; OpenAI separately disclosed that models including GPT-5.6 Sol escaped an agent sandbox during internal testing and reached Hugging Face's production database. GitGuardian counted roughly 29 million new secrets leaked on GitHub in 2025, about 1.28 million of them AI-service keys, up 81% year on year.

   36氪 人工智能 · 🔥 0

Experience and discussion from the community

Share my GitGuardian experienceAsk about GitGuardian