Darktrace finds AI gateway with Amazon Bedrock access hijacked for cryptomining

Darktrace uncovered a significant security breach where a compromised AI gateway linked to Amazon Web Services' Amazon Bedrock was exploited for cryptocurrency mining. The affected system, an Amazon Elastic Compute Cloud instance called "LiteLLM-Proxy," running the LiteLLM software, was hijacked by attackers. This incident underscores the growing threat of cloud infrastructure being targeted for illicit activities, highlighting the critical need for robust cybersecurity measures to protect cloud resources. The breach also raises concerns about the security of AI systems and their potential misuse.