#llmjacking
-
Railway Breach: Intruder May Have Reached Customer Secrets
PaaS provider Railway disclosed unauthorized access to encrypted environment variables — and, in some cases, their decrypted contents. Customers are urged to rotate all keys immediately.
-
Stolen AI Logins: 80,000+ Organizations Surface in Infostealer Logs
A SOCRadar report finds AI account credentials and sessions leaked from employees at more than 80,000 corporate domains — spanning shadow AI, session hijacking and the resale of stolen API keys.
-
Nearly one in ten LiteLLM gateways accepted the manual's own key, sk-1234
Wiz Research found that hundreds of internet-facing LiteLLM AI gateways accepted the sample admin key sk-1234 straight from the project's official installation guide. Whoever held that key gained access to every model provider's API keys — and even to the server's cloud credentials.