Summary
Cybersecurity researchers Darktrace have reported that AI gateways connected to Amazon Bedrock are being hijacked for cryptomining, with one incident involving a compromised LiteLLM-Proxy on AWS Bedrock through exposed SSH. Attackers used XMRig for mining and showed suspicious IAM activity traced to Vietnam, prompting experts to warn about the risks of privileged access in AI gateways.