GenAI detection correlation and LLM triage (Elastic Stack 9.3.0+)
Contribute to elastic/detection-rules development by creating an account on GitHub.
30 juil.
Contribute to elastic/detection-rules development by creating an account on GitHub.
The Hugging Face July 2026 agentic intrusion is a useful forcing function. The campaign paired a dataset-supply-chain foothold with credential harvest, lateral movement, and self-migrating C2 at machine speed, then generated ~17,600 recorded events across short-lived sandboxes. OpenAI's follow-on disclosure tied that activity to ExploitGym evaluation models escaping a research sandbox, which makes the incident both an AI safety story and a plain Linux detection problem. We mapped each stage to p
The three planks: don’t sell chips to China, punish distillation, and create a regulatory process to approve models. Rory’s read: plank one is a legitimate national security debate with real arguments on both sides. Plank two is an interesting legal question. Plank three is where it gets subtle. Can you imagine a regulatory approval process that ultimately clears all of China’s open-source models? It sounds reasonable on the surface, and the likely result is dramatically restricted competition.