add new incidents from permiso (#19)

adanalvarez · Oct 5, 2024 · eb3bdb0 · eb3bdb0
1 parent 8c21b23
commit eb3bdb0
Show file tree

Hide file tree

Showing 9 changed files with 1,068 additions and 837 deletions.
diff --git a/docs/datadog_dashboard.json b/docs/datadog_dashboard.json
diff --git a/docs/events.csv b/docs/events.csv
diff --git a/docs/events.json b/docs/events.json
@@ -5988,6 +5988,10 @@
             {
                 "description": "New tactics and techniques for proactive threat detection",
                 "link": "https://reinforce.awsevents.com/content/dam/reinforce/2024/slides/TDR432_New-tactics-and-techniques-for-proactive-threat-detection.pdf"
+            },
+            {
+                "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+                "link": "https://permiso.io/blog/exploiting-hosted-models"
             }
         ],
         "researchLinks": [],
@@ -6017,6 +6021,10 @@
             {
                 "description": "Detecting AI resource-hijacking with Composite Alerts",
                 "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+            },
+            {
+                "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+                "link": "https://permiso.io/blog/exploiting-hosted-models"
             }
         ],
         "researchLinks": [],
@@ -6075,6 +6083,10 @@
             {
                 "description": "Detecting AI resource-hijacking with Composite Alerts",
                 "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+            },
+            {
+                "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+                "link": "https://permiso.io/blog/exploiting-hosted-models"
             }
         ],
         "researchLinks": [],
@@ -6137,6 +6149,10 @@
             {
                 "description": "Detecting AI resource-hijacking with Composite Alerts",
                 "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+            },
+            {
+                "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+                "link": "https://permiso.io/blog/exploiting-hosted-models"
             }
         ],
         "researchLinks": [],
@@ -6166,6 +6182,10 @@
             {
                 "description": "Detecting AI resource-hijacking with Composite Alerts",
                 "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+            },
+            {
+                "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+                "link": "https://permiso.io/blog/exploiting-hosted-models"
             }
         ],
         "researchLinks": [],
@@ -6282,6 +6302,10 @@
             {
                 "description": "Detecting AI resource-hijacking with Composite Alerts",
                 "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+            },
+            {
+                "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+                "link": "https://permiso.io/blog/exploiting-hosted-models"
             }
         ],
         "researchLinks": [],

diff --git a/events/Bedrock/CreateFoundationModelAgreement.json b/events/Bedrock/CreateFoundationModelAgreement.json
@@ -14,6 +14,10 @@
         {
             "description": "Detecting AI resource-hijacking with Composite Alerts",
             "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+        },
+        {
+            "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+            "link": "https://permiso.io/blog/exploiting-hosted-models"
         }
     ],
     "researchLinks": [],

diff --git a/events/Bedrock/GetFoundationModelAvailability.json b/events/Bedrock/GetFoundationModelAvailability.json
@@ -14,6 +14,10 @@
         {
             "description": "Detecting AI resource-hijacking with Composite Alerts",
             "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+        },
+        {
+            "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+            "link": "https://permiso.io/blog/exploiting-hosted-models"
         }
     ],
     "researchLinks": [],

diff --git a/events/Bedrock/GetUseCaseForModelAccess.json b/events/Bedrock/GetUseCaseForModelAccess.json
@@ -14,6 +14,10 @@
         {
             "description": "Detecting AI resource-hijacking with Composite Alerts",
             "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+        },
+        {
+            "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+            "link": "https://permiso.io/blog/exploiting-hosted-models"
         }
     ],
     "researchLinks": [],

diff --git a/events/Bedrock/InvokeModel.json b/events/Bedrock/InvokeModel.json
@@ -24,6 +24,10 @@
         {
             "description": "New tactics and techniques for proactive threat detection",
             "link": "https://reinforce.awsevents.com/content/dam/reinforce/2024/slides/TDR432_New-tactics-and-techniques-for-proactive-threat-detection.pdf"
+        },
+        {
+            "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+            "link": "https://permiso.io/blog/exploiting-hosted-models"
         }
     ],
     "researchLinks": [],

diff --git a/events/Bedrock/PutFoundationModelEntitlement.json b/events/Bedrock/PutFoundationModelEntitlement.json
@@ -14,6 +14,10 @@
         {
             "description": "Detecting AI resource-hijacking with Composite Alerts",
             "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+        },
+        {
+            "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+            "link": "https://permiso.io/blog/exploiting-hosted-models"
         }
     ],
     "researchLinks": [],

diff --git a/events/Bedrock/PutUseCaseForModelAccess.json b/events/Bedrock/PutUseCaseForModelAccess.json
@@ -14,6 +14,10 @@
         {
             "description": "Detecting AI resource-hijacking with Composite Alerts",
             "link": "https://www.lacework.com/blog/detecting-ai-resource-hijacking-with-composite-alerts"
+        },
+        {
+            "description": "When AI Gets Hijacked: Exploiting Hosted Models for Dark Roleplaying",
+            "link": "https://permiso.io/blog/exploiting-hosted-models"
         }
     ],
     "researchLinks": [],