6TB leak from a Chinese LLM router exposes credentials to hijack Xiaomi, Huawei and gov entities
teortaxesTex · x · 2026-09-11
Security researcher @shoucccc revealed a severe data leak: he bought a "Fable" dataset from a top Chinese LLM router, and within just 6TB of data found SSH keys, VPN configs, Aliyun keys, and GitLab tokens sent to the router — enough to take over 7 Chinese/CIS government entities and 19 major Chinese firms including Xiaomi, Huawei, NIO and Minimax. @teortaxesTex amplified it, commenting that no Mythos-style cyberattack is needed. The incident highlights how LLM API routers aggregate highly sensitive credentials from user traffic.
More from Safety
- AI cyber-wreckage noise far outstrips actual damage so far, argues new analysis — timigod · 2026-10-28
- OpenAI to co-host webinar on php2shell disclosure and AI-driven vulnerability discovery — gdb · 2026-10-28
- Rust and Verus shrink the search space for AI-driven CVE hunting, but does it ever end? — jd_pressman · 2026-10-28
- Anthropic pushes back on Slack breach rumors but admits security must be reinvented yearly — logangraham · 2026-10-28
- jackson-databind hit with CVSS 9.8 flaw CVE-2026-110879, bypassing prior fix — Kyrannio · 2026-10-28
- Archil founder: AI reverse-engineering is making it unsafe to ship binaries to customers — RexDouglass · 2026-10-28