Hackers Exploit Misconfigured Proxies to Access LLM Services

Hackers Exploit Misconfigured Proxies to Access LLM Services

First seen 9 Jan 2026, 21:48 UTC •GreynoiseBleepingcomputerScmagazineThecyberexpress •83% similarity •24.3

Article Content

Browse articles
ThreatCluster

Threat actors have been targeting misconfigured proxy servers to gain unauthorized access to commercial large language model (LLM) services. This campaign, which began in late December 2025, has seen over 91,000 attack sessions recorded, indicating a systematic effort to map AI deployment vulnerabilities.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →