Trend Micro Warns of Thousands of Exposed AI Servers
Trend Micro (TMICY) has released a critical cybersecurity report highlighting significant vulnerabilities in AI infrastructure deployment. The research reveals over 12,200 exposed AI servers including 200+ ChromaDB servers, 2,000 Redis servers, and 10,000+ Ollama servers accessible without authentication.
The report identifies four major security challenges: vulnerabilities in critical components, accidental internet exposure, open-source component vulnerabilities, and container-based weaknesses. Researchers discovered zero-day vulnerabilities in core components including ChromaDB, Redis, NVIDIA Triton, and NVIDIA Container Toolkit.
To mitigate these risks, Trend Micro recommends implementing improved patch management, maintaining software component inventory, following container security best practices, and conducting regular configuration checks.
Trend Micro (TMICY) ha pubblicato un rapporto critico sulla cybersecurity che evidenzia vulnerabilit脿 significative nell'implementazione delle infrastrutture AI. La ricerca rivela oltre 12.200 server AI esposti, tra cui pi霉 di 200 server ChromaDB, 2.000 server Redis e oltre 10.000 server Ollama accessibili senza autenticazione.
Il rapporto individua quattro principali sfide di sicurezza: vulnerabilit脿 nei componenti critici, esposizione accidentale su internet, vulnerabilit脿 nei componenti open-source e debolezze legate ai container. I ricercatori hanno scoperto vulnerabilit脿 zero-day in componenti fondamentali come ChromaDB, Redis, NVIDIA Triton e NVIDIA Container Toolkit.
Per mitigare questi rischi, Trend Micro consiglia di implementare una gestione delle patch pi霉 efficace, mantenere un inventario aggiornato dei componenti software, seguire le migliori pratiche di sicurezza per i container e effettuare controlli regolari delle configurazioni.
Trend Micro (TMICY) ha publicado un informe cr铆tico de ciberseguridad que destaca vulnerabilidades significativas en la implementaci贸n de infraestructuras de IA. La investigaci贸n revela m谩s de 12,200 servidores de IA expuestos, incluyendo m谩s de 200 servidores ChromaDB, 2,000 servidores Redis y m谩s de 10,000 servidores Ollama accesibles sin autenticaci贸n.
El informe identifica cuatro grandes desaf铆os de seguridad: vulnerabilidades en componentes cr铆ticos, exposici贸n accidental en internet, vulnerabilidades en componentes de c贸digo abierto y debilidades relacionadas con contenedores. Los investigadores descubrieron vulnerabilidades zero-day en componentes clave como ChromaDB, Redis, NVIDIA Triton y NVIDIA Container Toolkit.
Para mitigar estos riesgos, Trend Micro recomienda implementar una mejor gesti贸n de parches, mantener un inventario de componentes de software, seguir las mejores pr谩cticas de seguridad para contenedores y realizar revisiones regulares de configuraci贸n.
Trend Micro (TMICY)電� AI 鞚疙攧霛� 氚办箻鞐愳劀 鞁皝頃� 旆暯鞝愳潉 臧曥“頃橂姅 欷戩殧頃� 靷澊氩勲炒鞎� 氤搓碃靹滊ゼ 氚滍憸頄堨姷雼堧嫟. 鞐瓣惮鞐� 霐半ゴ氅� 鞚胳 鞐嗢澊 鞝戧芳 臧�電ロ暅 200臧� 鞚挫儊鞚� ChromaDB 靹滊矂, 2,000臧滌潣 Redis 靹滊矂, 10,000臧� 鞚挫儊鞚� Ollama 靹滊矂毳� 韽暔頃� 12,200臧� 鞚挫儊鞚� 雲胳稖霅� AI 靹滊矂臧� 鞛堨姷雼堧嫟.
氤搓碃靹滊姅 雱� 臧�歆� 欤检殧 氤挫晥 氍胳牅毳� 歆�鞝來暕雼堧嫟: 頃奠嫭 甑劚 鞖旍唽鞚� 旆暯鞝�, 鞖半皽鞝侅澑 鞚疙劙雱� 雲胳稖, 鞓ろ攬 靻岇姢 甑劚 鞖旍唽鞚� 旆暯鞝�, 旎厡鞚措剤 旮半皹 鞎届爯. 鞐瓣惮歆勳潃 ChromaDB, Redis, NVIDIA Triton, NVIDIA Container Toolkit 霌� 頃奠嫭 甑劚 鞖旍唽鞐愳劀 鞝滊雿办澊 旆暯鞝愳潉 氚滉铂頄堨姷雼堧嫟.
鞚措煬頃� 鞙勴棙鞚� 鞕勴檾頃橁赴 鞙勴暣 Trend Micro電� 韺箻 甏�毽� 臧滌劆, 靻岉攧韸胳洦鞏� 甑劚 鞖旍唽 鞚鸽菠韱犽Μ 鞙犾, 旎厡鞚措剤 氤挫晥 氇矓 靷 欷�靾�, 鞝曣赴鞝侅澑 甑劚 鞝愱瞼鞚� 甓岇灔頃╇媹雼�.
Trend Micro (TMICY) a publi茅 un rapport critique sur la cybers茅curit茅 mettant en lumi猫re des vuln茅rabilit茅s majeures dans le d茅ploiement des infrastructures d'IA. La recherche r茅v猫le plus de 12 200 serveurs d'IA expos茅s, dont plus de 200 serveurs ChromaDB, 2 000 serveurs Redis et plus de 10 000 serveurs Ollama accessibles sans authentification.
Le rapport identifie quatre principaux d茅fis de s茅curit茅 : vuln茅rabilit茅s dans les composants critiques, exposition accidentelle sur internet, vuln茅rabilit茅s des composants open-source et faiblesses li茅es aux conteneurs. Les chercheurs ont d茅couvert des vuln茅rabilit茅s zero-day dans des composants cl茅s tels que ChromaDB, Redis, NVIDIA Triton et NVIDIA Container Toolkit.
Pour att茅nuer ces risques, Trend Micro recommande de mettre en place une meilleure gestion des correctifs, de maintenir un inventaire des composants logiciels, de suivre les bonnes pratiques de s茅curit茅 des conteneurs et de r茅aliser des v茅rifications r茅guli猫res des configurations.
Trend Micro (TMICY) hat einen kritischen Cybersecurity-Bericht ver枚ffentlicht, der erhebliche Schwachstellen bei der Bereitstellung von KI-Infrastrukturen aufzeigt. Die Untersuchung enth眉llt 眉ber 12.200 exponierte KI-Server, darunter mehr als 200 ChromaDB-Server, 2.000 Redis-Server und 眉ber 10.000 Ollama-Server, die ohne Authentifizierung zug盲nglich sind.
Der Bericht identifiziert vier gro脽e Sicherheitsherausforderungen: Schwachstellen in kritischen Komponenten, unbeabsichtigte Internet-Exposition, Schwachstellen in Open-Source-Komponenten und Container-basierte Schw盲chen. Forscher entdeckten Zero-Day-Schwachstellen in Kernkomponenten wie ChromaDB, Redis, NVIDIA Triton und NVIDIA Container Toolkit.
Um diese Risiken zu mindern, empfiehlt Trend Micro die Implementierung eines verbesserten Patch-Managements, die Pflege eines Inventars der Softwarekomponenten, die Befolgung von Best Practices f眉r Containerschutz und regelm盲脽ige Konfigurations眉berpr眉fungen.
- Comprehensive identification of over 12,200 vulnerable AI servers, demonstrating leadership in cybersecurity research
- Discovery of critical zero-day vulnerabilities in major AI components, positioning Trend Micro as a key security authority
- Strategic recommendations provided for risk mitigation, enhancing customer value proposition
- Exposure of significant vulnerabilities could impact Trend Micro's AI-related products and services
- Findings may lead to increased scrutiny of Trend Micro's own AI security practices
Latest research reveals mounting infrastructure-level risks from diverse components听
To learn more about how network defenders and adversaries are using AI, read Trend Micro State of AI Security Report, 1H 2025:
Rachel Jin, Chief Enterprise Platform Officer at Trend: "AI may represent the opportunity of the century for global businesses. But those rushing in too fast without taking adequate security precautions may end up causing more harm than good. As our report reveals, too much AI infrastructure is already being built from unsecured and/or unpatched components,听creating an open door for threat actors."
Trend's report highlights several :
1)听 Vulnerabilities/exploits in critical components
Organizations wishing to develop, deploy and use AI applications must leverage multiple specialized software components and frameworks, which may contain vulnerabilities one may find in regular software. The report reveals zero-day vulnerabilities and exploits in core components including ChromaDB, Redis, NVIDIA Triton, and NVIDIA Container Toolkit.
2)听 Accidental exposure to the internet
Vulnerabilities are often the result of rushed development and deployment timelines, as are instances when 听are accidentally exposed to the internet, where they can be probed by adversaries. As detailed in the report, Trend has found 200+ ChromaDB servers, 2,000 Redis servers, and 10,000+ Ollama servers exposed to the internet with no authentication.
3)听 Vulnerabilities in open-source components
Many AI frameworks and platforms use open-source software libraries to provide common functionality.听 However, open-source components often contain vulnerabilities that end up creeping into production systems, where they are hard to detect. At the recent 听Berlin, which featured a new AI category, researchers uncovered an exploit for the Redis vector database, which stemmed from an outdated Lua component.
4)听 Container-based weaknesses
A great deal of AI infrastructure runs on containers, meaning it is exposed to the same security vulnerabilities and threats that impact cloud and container environments. As outlined in the report, Pwn2Own researchers were able to uncover an exploit for the NVIDIA Container Toolkit. Organizations should sanitize inputs and monitor runtime behavior听to mitigate such risks.
Stuart MacLellan, CTO, NHS SLAM: "There are still lots of questions around AI models and how they could and should be used. We now get much more information now than we ever did about the visibility of devices and what applications are being used. It's interesting to collate that data and get dynamic, risk-based alerts on people and what they're doing depending on policies and processes. That's going to really empower the decisions that are made organizationally around certain products."
Both the developer community and its customers must better balance security with time to market in order to mitigate the risks outlined above. Concrete steps could include:
- Improved patch management and vulnerability scans
- Maintaining an inventory of all software components, including third-party libraries and subsystems
- Container management security best practices, including using minimal base images and runtime security tools
- Configuration checks to ensure AI infrastructure components, like servers aren't exposed to the internet
About Trend Micro
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information.听Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's AI-powered cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints.听As a leader in cloud and enterprise cybersecurity, Trend's platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response.听With 7,000 employees across 70 countries, Trend Micro enables organizations to simplify and secure their connected world. .
听
听
View original content to download multimedia:
SOURCE Trend Micro Incorporated
FAQ
How many AI servers did Trend Micro (TMICY) find exposed to potential cyber attacks?
What are the main security challenges in AI infrastructure identified by Trend Micro?
Which critical AI components were found to have vulnerabilities by Trend Micro?
What solutions does Trend Micro recommend for securing AI infrastructure?
Why is the Trend Micro AI security report significant for cybersecurity in 2025?
