Attacks on AI Infrastructure: 90-Day Honeypot Telemetry

Reported 27 Aug 2026 by otx · Severity: medium

Wiz Threat Research deployed honeypots across AI and ML services including LiteLLM, Flowise, LangChain, Langflow, ChromaDB, and Ollama, observing sustained attack activity over 90 days. Three distinct attack patterns emerged: exploitation of Internet-facing MCP servers for remote