/
ttps_attack:T1595 × has_exploit:true × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

greynoise.io · exploit público medium

Scanners spoofing OpenAI, Anthropic, Google and Perplexity AI crawlers probe for .env files, cloud keys and credentials

GreyNoise observed automated scanners impersonating the web crawlers of OpenAI, Anthropic, Google, Perplexity, DeepSeek and Amazon while requesting environment files, cloud access keys, private keys and password stores. A cluster of 13 forged AI crawler names from eight companies was seen; six names (belonging to Anthropic, OpenAI, Google…

CVE-2025-30208
sekoia.com · exploit público medium

Chinese-speaking actor abuses unauthenticated Flowise honeypot to steal secrets and use its LLM agent against a gambling network's Nightingale server

In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…

CVE-2025-59528 CVE-2026-41264 CVE-2024-31621 gambling ai_platforms