Paper reveals malicious intermediary attacks in LLM supply chain stealing keys and funds
elie · x · 2026-08-24
A paper titled "Your Agent Is Mine" presents the first systematic study of malicious intermediary attacks within the LLM supply chain. Investigating 28 paid and 400 free third-party LLM API routers, researchers discovered real-world malicious activities, including code injection, cloud credential theft, and cryptocurrency wallet draining. Attackers exploit the lack of cryptographic integrity enforcement between clients and upstream providers, executing attacks via payload injection and secret exfiltration. The study highlights that every intermediary between an agent and a model is part of the security boundary, amplifying supply chain risks.
More from Safety
- Senate set to give staffers access to Anthropic's Claude, Bloomberg reports — ShakeelHashim · 2026-10-16
- FDA pays small company to build a grading system for AI-written radiology reports — YvesMulkers · 2026-10-16
- OpenAI tells US judiciary there may be no reliable way to detect AI-generated images and videos — Polymarket · 2026-10-16
- Gartner: 75% of organizations have seen unauthorized use of AI coding assistants — moniquejmorrow · 2026-10-16
- [un]prompted conference to stage three AI security debates on vulns, defenses, jailbreaks — WeldPond · 2026-10-16
- User Questions AI Chat Logs Being Instantly Copied to Governments and Firms — Turn_Trout · 2026-10-16