Trend Micro Warns of Thousands of Exposed AI Servers
Rhea-AI Summary
Trend Micro (TMICY) has released a critical cybersecurity report highlighting significant vulnerabilities in AI infrastructure deployment. The research reveals over 12,200 exposed AI servers including 200+ ChromaDB servers, 2,000 Redis servers, and 10,000+ Ollama servers accessible without authentication.
The report identifies four major security challenges: vulnerabilities in critical components, accidental internet exposure, open-source component vulnerabilities, and container-based weaknesses. Researchers discovered zero-day vulnerabilities in core components including ChromaDB, Redis, NVIDIA Triton, and NVIDIA Container Toolkit.
To mitigate these risks, Trend Micro recommends implementing improved patch management, maintaining software component inventory, following container security best practices, and conducting regular configuration checks.
Positive
- Comprehensive identification of over 12,200 vulnerable AI servers, demonstrating leadership in cybersecurity research
- Discovery of critical zero-day vulnerabilities in major AI components, positioning Trend Micro as a key security authority
- Strategic recommendations provided for risk mitigation, enhancing customer value proposition
Negative
- Exposure of significant vulnerabilities could impact Trend Micro's AI-related products and services
- Findings may lead to increased scrutiny of Trend Micro's own AI security practices
News Market Reaction
On the day this news was published, TMICY gained 1.02%, reflecting a mild positive market reaction.
Data tracked by StockTitan Argus on the day of publication.
Latest research reveals mounting infrastructure-level risks from diverse components
To learn more about how network defenders and adversaries are using AI, read Trend Micro State of AI Security Report, 1H 2025: https://trendmicro.com/vinfo/us/security/news/trend-micro-state-of-ai-security-report-1h-2025
Rachel Jin, Chief Enterprise Platform Officer at Trend: "AI may represent the opportunity of the century for global businesses. But those rushing in too fast without taking adequate security precautions may end up causing more harm than good. As our report reveals, too much AI infrastructure is already being built from unsecured and/or unpatched components, creating an open door for threat actors."
Trend's report highlights several AI-related security challenges:
1) Vulnerabilities/exploits in critical components
Organizations wishing to develop, deploy and use AI applications must leverage multiple specialized software components and frameworks, which may contain vulnerabilities one may find in regular software. The report reveals zero-day vulnerabilities and exploits in core components including ChromaDB, Redis, NVIDIA Triton, and NVIDIA Container Toolkit.
2) Accidental exposure to the internet
Vulnerabilities are often the result of rushed development and deployment timelines, as are instances when AI systems are accidentally exposed to the internet, where they can be probed by adversaries. As detailed in the report, Trend has found 200+ ChromaDB servers, 2,000 Redis servers, and 10,000+ Ollama servers exposed to the internet with no authentication.
3) Vulnerabilities in open-source components
Many AI frameworks and platforms use open-source software libraries to provide common functionality. However, open-source components often contain vulnerabilities that end up creeping into production systems, where they are hard to detect. At the recent Pwn2Own Berlin, which featured a new AI category, researchers uncovered an exploit for the Redis vector database, which stemmed from an outdated Lua component.
4) Container-based weaknesses
A great deal of AI infrastructure runs on containers, meaning it is exposed to the same security vulnerabilities and threats that impact cloud and container environments. As outlined in the report, Pwn2Own researchers were able to uncover an exploit for the NVIDIA Container Toolkit. Organizations should sanitize inputs and monitor runtime behavior to mitigate such risks.
Stuart MacLellan, CTO, NHS SLAM: "There are still lots of questions around AI models and how they could and should be used. We now get much more information now than we ever did about the visibility of devices and what applications are being used. It's interesting to collate that data and get dynamic, risk-based alerts on people and what they're doing depending on policies and processes. That's going to really empower the decisions that are made organizationally around certain products."
Both the developer community and its customers must better balance security with time to market in order to mitigate the risks outlined above. Concrete steps could include:
- Improved patch management and vulnerability scans
- Maintaining an inventory of all software components, including third-party libraries and subsystems
- Container management security best practices, including using minimal base images and runtime security tools
- Configuration checks to ensure AI infrastructure components, like servers aren't exposed to the internet
About Trend Micro
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's AI-powered cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, Trend's platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 70 countries, Trend Micro enables organizations to simplify and secure their connected world. www.TrendMicro.com.
FAQ
How many AI servers did Trend Micro (TMICY) find exposed to potential cyber attacks?
What are the main security challenges in AI infrastructure identified by Trend Micro?
Which critical AI components were found to have vulnerabilities by Trend Micro?
What solutions does Trend Micro recommend for securing AI infrastructure?
Why is the Trend Micro AI security report significant for cybersecurity in 2025?
