Threat actors are impersonating web crawlers from OpenAI, Anthropic, DeepSeek, and other major organizations to scan websites for exposed credentials and sensitive configuration files, targeting misconfigured servers that may leak cloud keys, API tokens, passwords, and private keys. GreyNoise observed a broader cluster using 13 AI crawler identities from eight companies. The scanners requested files […]
This article has been indexed from Cyber Security News
Read the original article: