LLMjacking attack AI attack surface
-
AI Supply Chain Security: Deep Analysis Report on the Attack Surfaces of About 175,000 Global Ollama Framework Instances
With the popularity of large models (LLMs), open-source localized deployment frameworks, represented by Ollama, have dramatically lowered the threshold for developers to use and manage AI models. However, this convenience has also spawned new, large-scale security risks. A recent study jointly published by SentinelOne, Censys, and Pillar Security reveals the startling fact that there are more than 175,000 publicly exposed instances of Ollama on the Internet globally, creating a massive AI computing infrastructure security attack surface risk
This report aims to analyze the technical aspects of this incident. This report aims to provide an in-depth technical analysis of this incident, analyze its attack surface, realistic threats, systemic risks, and propose corresponding enterprise-level security hardening and governance strategies.
