Wiz Finds Active LiteLLM and MCP Attacks Targeting AI Infrastructure

Attackers are adapting their tradecraft to AI infrastructure, not just scanning it like another web service. Wiz Threat Research said its 90-day honeypot operation captured sustained attacks against LiteLLM, Model Context Protocol (MCP) servers, LangChain, Flowise, Langflow, OpenWebUI, Node-RED, and other AI services. The activity included LiteLLM...