Internet-exposed AI tools and ICS: what practitioners need to act on

TL;DR: Internet-exposed AI/LLM tool exposures have risen over 60% in the past nine months, with more than 294,000 distinct IPs now exposing 43 tools, while Internet-exposed ICS hosts remain widespread and geographically shifting, according to Censys research. The practical issue is not just growth, but the persistence of high-risk services on public networks without commensurate authentication, segmentation, or exposure governance.

Editorial analysis by NHI Mgmt Group, based on content published by Censys: “The State of the Internet Is Changing: AI Exposures Surge While Global ICS Trends Shift”.

By the numbers:

• AI/LLM tool exposures have risen over 60% in the past 9 months.
• Langflow grew 169% in the last nine months.

Key questions

Q: How should teams reduce the risk of exposed AI credentials being abused?

A: Treat AI-connected secrets as high-priority NHIs and minimise their lifespan, scope, and exposure paths.

Q: Why do exposed internet-facing systems create such a high-risk window for attackers?

A: Exposed systems reduce the time attackers need to move from discovery to exploitation.

Q: What are the signs that exposed infrastructure is not under control?

A: Common signals include unknown public IPs, services exposed from consumer or mobile networks, repeated exposure after advisories, and platforms whose credential dependencies are not mapped.

Practitioner guidance

• Inventory exposed AI and ICS services continuously Create an externally reachable asset register that includes AI tools, proxies, orchestration layers, and ICS-facing hosts, then reconcile it against business ownership and approved exposure.
• Remove unauthenticated public access to AI tooling Place AI tools, admin consoles, and model proxies behind strong authentication, network restrictions, and explicit approval for any Internet exposure.
• Map exposed services to credential dependencies Identify which API keys, tokens, or service accounts each exposed platform can reach so a single compromise cannot cascade into multiple upstream systems.

Bottom line: Internet exposure is not a passive measurement issue. It is a control problem that determines whether AI tools and ICS services can be reached, probed, and abused from outside the environment.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →