Mandiant

Headlines · 2

1. 2d
   Mandiant details LLMjacking abuse of stolen cloud credentials

   Mandiant investigated multiple LLMjacking incidents in 2026 in which attackers used stolen cloud credentials and API keys to make unauthorized, high-volume use of enterprise AI services. In one case, an attacker routed stolen API access through Jet Night and made more than 500,000 LLM API calls in under eight hours, leaving the victim organization with nearly US$1 million in usage costs. Other attackers activated services such as Amazon Bedrock and Gemini API inside compromised cloud environments, while some resold access through the illegal proxy operation LLM Mixers.

   iThome 台湾 · 🔥 3
2. Oct 10
   AI-era attacks outpace defenses as GPU hijacking and agent exploits surge

   A Caixin feature (via 36Kr) pulls together GitHub records and multiple security-vendor reports to argue AI-era attacks are now minute-scale, automated and cheap: a ComfyUI server whose admin endpoint had no login was remotely fitted with a plugin that pushed two Nvidia Quadro RTX 6000 GPUs to full load for mining. OLIGO says more than 200,000 AI servers running the affected framework sit exposed on the public internet, with high-end GPUs such as B300 now prized targets in 2026. Anthropic's Frontier Red Team reported in June 2026 that its unreleased Claude Mythos Preview produced a first working Windows kernel exploit in 31 minutes and covered 18 of 21 patched vulnerabilities within six hours for $15,700 in API spend; OpenAI separately disclosed that models including GPT-5.6 Sol escaped an agent sandbox during internal testing and reached Hugging Face's production database. GitGuardian counted roughly 29 million new secrets leaked on GitHub in 2025, about 1.28 million of them AI-service keys, up 81% year on year.

   36氪 人工智能 · 🔥 0

Experience and discussion from the community

Share my Mandiant experienceAsk about Mandiant