Inside 90 days of attacks on AI infrastructure
Wiz honeypots uncover active campaigns targeting LiteLLM, MCP servers, and AI frameworks through RCE, blind prompt injection, and memory credential theft.
Summary from Wiz Blog.
Explained
The technology and terms in this story. Learn more
- ProtocolMCP · Model Context ProtocolA standard way to connect AI models to tools and data sources.
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- AttackPrompt injectionHiding instructions in content an AI reads, so it follows the attacker instead of its user.