Too much open-source AI is exposing itself to the web
As if AI weren't enough of a security concern, now researchers have discovered that open-source AI deployments may be an even bigger problem than those from commercial providers.Threat researchers at SentinelLABS teamed up with internet mappers from Censys to take a look at the footprint of Ollama deployments exposed to the internet, and what they found was a global network of largely homogenous, open-source AI deployments just waiting for the right zero-day to come along.
175,108 unique Ollama hosts in 130 countries were found exposed to the public internet, with the vast majority of instances found to be running Llama, Qwen2, and Gemma2 models, most of those relying on the same compression choices and packaging regimes. That, says the pair, suggests open-source AI deployments have become a monoculture ripe for exploitation.
Open-source AI is a global security nightmare waiting to happen, say researchers
Infosec in Brief: Also, South Korea gets a pentesting F, US Treasury says bye bye to BAH, North Korean hackers evolve, and moreBrandon Vigliarolo (The Register)
Moore Threads announces a new GPU architecture that will power upcoming gaming and AI compute GPUs
Moore Threads announces a new GPU architecture that will power upcoming gaming and AI compute GPUs
Moore Threads unveils Huagang architecture with Lushan and Huashan GPUs, promising massive gains in gaming, ray tracing, and AI performance.Rajesh (Gizmochina)
in reply to ☆ Yσɠƚԋσʂ ☆
So these guys just send plain text emails to each other saying "Hey Jeff we're plotting to overthrow Putin. Here are the names of my co-conspirators. Wanna help?" and they don't consider this kind of a stupid thing to do?
Ram_The_Manparts [he/him]
in reply to ComradeSharkfucker • • •