-
Potential Azure OpenAI Model Theft
Oct 7, 2026 · Domain: GenAI Data Source: Azure OpenAI Data Source: Azure Event Hubs Use Case: Model Theft Resources: Investigation Guide Noise: Low Performance: Fast Profile: Recommended Threat: Unauthorized AI Usage Threat: LLMjacking Rule Type: ES|QL Platform: Azure Domain: Cloud Service: Azure OpenAI Service: Azure Event Hubs Mitre Atlas: AML.T0044 Mitre Atlas: AML.T0024.002 ·Monitors for suspicious activities that may indicate theft or unauthorized duplication of machine learning (ML) models, such as unauthorized API calls, atypical access patterns, or large data transfers that are unusual during model interactions.
Read More -
Ollama API Accessed from External Network
Oct 1, 2026 · Domain: Endpoint OS: Linux OS: macOS OS: Windows Use Case: Threat Detection Tactic: Initial Access Data Source: Elastic Defend Resources: Investigation Guide Noise: Low Performance: Normal Rule Type: Event Correlation (EQL) Platform: Windows Platform: Linux Platform: macOS Domain: GenAI Mitre Atlas: AML.T0040 Mitre Atlas: AML.T0044 Mitre Atlas: AML.T0049 ·Detects when the Ollama LLM server accepts connections from external IP addresses. Ollama lacks built-in authentication, so exposed instances allow unauthenticated model theft, prompt injection, and resource hijacking.
Read More