First Public Confirmation of Threat Actors Targeting AI Systems

Security researchers have publicly confirmed, for the first time, that threat actors are actively scanning and probing enterprise AI systems for exploitation. Correlated observations from DefusedCyber and GrayNoise show systematic reconnaissance of exposed LLM endpoints—using techniques associated with known CVE exploitation pipelines—marking a shift from theoretical AI risk to active adversary…