/
affected_products:Redis × limpar

Resultados

4 casos · pág. 1/1

sekoia.com · exploit público medium

Chinese-speaking actor abuses unauthenticated Flowise honeypot to steal secrets and use its LLM agent against a gambling network's Nightingale server

In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…

newsroom.trendmicro.com · high

Trend Micro reports thousands of unauthenticated AI servers exposed online, plus flaws in ChromaDB, Redis, NVIDIA Triton and Container Toolkit

Trend Micro published its State of AI Security Report, 1H 2025, warning that AI infrastructure is being built from unsecured and unpatched components. The research found 200+ ChromaDB servers, 2,000 Redis servers and 10,000+ Ollama servers exposed to the internet with no authentication. It also reports zero-day vulnerabilities and exploit…

f5.com · medium

F5 Labs: Chinese open-weight AI models show strong cyber capability but uneven resistance to prompt injection and jailbreaks

F5 Labs assesses the security risks and rewards of Chinese open-weight LLMs (Qwen, GLM, Kimi, MiMo, MiniMax, DeepSeek). It finds that strong offensive and defensive cyber capability does not translate into consistent resistance to attack. Cited examples include Kimi K3 finding 19 vulnerabilities in Redis and GLM 5.2 being self-hosted by H…