-
Ollama API Accessed from External Network
Sep 19, 2026 · Domain: Endpoint OS: Linux OS: macOS OS: Windows Use Case: Threat Detection Tactic: Initial Access Data Source: Elastic Defend Resources: Investigation Guide Domain: LLM Mitre Atlas: T0040 Mitre Atlas: T0044 Noise: Low Performance: Normal Rule Type: Event Correlation (EQL) Platform: Windows Platform: Linux Platform: macOS Domain: GenAI ·Detects when the Ollama LLM server accepts connections from external IP addresses. Ollama lacks built-in authentication, so exposed instances allow unauthenticated model theft, prompt injection, and resource hijacking.
Read More -
Potential Azure OpenAI Model Theft
Sep 19, 2026 · Domain: LLM Data Source: Azure OpenAI Data Source: Azure Event Hubs Use Case: Model Theft Mitre Atlas: T0044 Resources: Investigation Guide Noise: Low Performance: Fast Profile: Recommended Threat: Unauthorized AI Usage Threat: LLMjacking Rule Type: ES|QL Platform: Azure Domain: Cloud Domain: GenAI Service: Azure OpenAI Service: Azure Event Hubs ·Monitors for suspicious activities that may indicate theft or unauthorized duplication of machine learning (ML) models, such as unauthorized API calls, atypical access patterns, or large data transfers that are unusual during model interactions.
Read More