Ayush RoyChowdhury | Zenity Labs

Oliver Buchannon

Ayush RoyChowdhury

Security Researcher @ Zenity

Threat Actors Are Trying to use LiteLLM's Guardrail Tester to Run Code as Root

Jun 30, 2026

•

5 min read

Threat Actors Are Trying to use LiteLLM's Guardrail Tester to Run Code as Root

A closer look at custom-code guardrail sandbox-escape (CVE–2026-40217) activity in the wild

Avishai Efrat, +1

Threat Actors Are Trying to Turn LiteLLM's Connection-Test Into a Key-Exfiltration Channel

Jun 30, 2026

•

6 min read

Threat Actors Are Trying to Turn LiteLLM's Connection-Test Into a Key-Exfiltration Channel

A closer look at api_base SSRF (CVE-2024-6587) activity in the wild, and its nested variant

Avishai Efrat, +1

Scanning for AI: Live Campaigns Mapping the Internet's Exposed LLM Backends

Jun 30, 2026

•

5 min read

Scanning for AI: Live Campaigns Mapping the Internet's Exposed LLM Backends

Inside mass discovery and model-probing reconnaissance campaigns that are mapping LLM backend servers in the wild

Ayush RoyChowdhury, +1

Bring Your Own Agent: Hijacking Exposed AI Backends to Power Offensive Operations

Jun 30, 2026

•

7 min read

Bring Your Own Agent: Hijacking Exposed AI Backends to Power Offensive Operations

Threat actors attempting to hijack Ollama & LiteLLM endpoints to run pentesting agents, tools and web reverse-engineering

Ayush RoyChowdhury, +1

What You Don’t Know Can Hurt You: Why AI Security Research Needs to Move Out of the Lab and Into the Wild

Jun 30, 2026

•

5 min read

What You Don’t Know Can Hurt You: Why AI Security Research Needs to Move Out of the Lab and Into the Wild

What we can learn from observing real attacks, made by real adversaries

Ayush RoyChowdhury, +1