Hackers are going after top LLM services by cracking misconfigured proxies

GreyNoise logged 91,000 attack sessions against exposed AI systems between Oct 2025 and Jan 2026 Campaigns included tricking servers into “phoning home” and mass probing to map AI models Malicious actors targeted…