Keeping attackers from running up your model bill and stealing your data
Scanning, exploiting Django and Jupyter, harvesting .env files, and mining Monero are old tricks, but the assembly is new, Dickson noted. “One prompt turns a borrowed model into the brain of a campaign that once took a skilled crew,” he said. “That lowers the bar for who can run one.”
Symantec had noted that much of the exposure is a matter of configuration rather than malware, he emphasized, but the volume is real: The honeypot logged more than 127,000 external requests from tens of thousands of addresses, dominated by probing for model endpoints, spraying stolen keys, and hunting for exposed configuration files.
To protect themselves, enterprises should inventory every model server, AI gateway, and MCP server, including the “test system someone stood up on a Friday afternoon,” he advised. Require authentication on every path, including the health check. Treat AI API keys as high-value credentials; scope them, rotate them, and keep them out of code.
