-
Azure OpenAI Insecure Output Handling
Oct 7, 2026 · Domain: GenAI Data Source: Azure OpenAI Data Source: Azure Event Hubs Use Case: Insecure Output Handling Resources: Investigation Guide Noise: Low Performance: Fast Threat: Unauthorized AI Usage Threat: LLMjacking Rule Type: ES|QL Platform: Azure Domain: Cloud Service: Azure OpenAI Service: Azure Event Hubs Mitre Atlas: AML.T0051 Mitre Atlas: AML.T0057 ·Detects when Azure OpenAI requests result in zero response length, potentially indicating issues in output handling that might lead to security exploits such as data leaks or code execution. This can occur in cases where the API fails to handle outputs correctly under certain input conditions.
Read More -
Potential Azure OpenAI Model Theft
Oct 7, 2026 · Domain: GenAI Data Source: Azure OpenAI Data Source: Azure Event Hubs Use Case: Model Theft Resources: Investigation Guide Noise: Low Performance: Fast Profile: Recommended Threat: Unauthorized AI Usage Threat: LLMjacking Rule Type: ES|QL Platform: Azure Domain: Cloud Service: Azure OpenAI Service: Azure Event Hubs Mitre Atlas: AML.T0044 Mitre Atlas: AML.T0024.002 ·Monitors for suspicious activities that may indicate theft or unauthorized duplication of machine learning (ML) models, such as unauthorized API calls, atypical access patterns, or large data transfers that are unusual during model interactions.
Read More -
Potential Denial of Azure OpenAI ML Service
Oct 7, 2026 · Domain: GenAI Data Source: Azure OpenAI Data Source: Azure Event Hubs Use Case: Denial of Service Resources: Investigation Guide Noise: Low Performance: Fast Profile: Recommended Threat: Unauthorized AI Usage Rule Type: ES|QL Platform: Azure Domain: Cloud Service: Azure OpenAI Service: Azure Event Hubs Mitre Atlas: AML.T0029 ·Detects patterns indicative of Denial-of-Service (DoS) attacks on machine learning (ML) models, focusing on unusually high volume and frequency of requests or patterns of requests that are known to cause performance degradation or service disruption, such as large input sizes or rapid API calls.
Read More