Skip to content
Threat Feed
high advisory

CrowdStrike Falcon AIDR and NVIDIA NeMo Guardrails Secure AI Agents

CrowdStrike Falcon AIDR now supports NVIDIA NeMo Guardrails (v0.20.0), providing enterprise-grade protection for AI agents by managing data access, controlling responses, ensuring policy compliance, and blocking prompt injection attacks.

The integration of CrowdStrike Falcon AIDR with NVIDIA NeMo Guardrails (v0.20.0) addresses the critical need to secure AI agents transitioning from experimental projects to mainstream business tools. A compromised AI agent can expose customer data, execute unauthorized transactions, and violate compliance requirements across numerous interactions. This new capability aims to limit the scope of AI agents to stay within stated business goals and prevent abuse. CrowdStrike Falcon AIDR and NVIDIA NeMo Guardrails enable developers to manage agentic data access, control agent responses, and oversee data sources, ensuring custom policy compliance and safety controls. This integration allows organizations to confidently move AI agents from development to production, providing enhanced visibility and control.

Attack Chain

  1. Initial Access: An attacker crafts a malicious prompt designed to bypass initial input sanitization.
  2. Prompt Injection: The malicious prompt injects unauthorized commands into the AI agent’s workflow.
  3. Data Exfiltration: The injected commands instruct the AI agent to access and extract sensitive data, such as customer PII or financial records.
  4. Privilege Escalation: The attacker leverages the compromised AI agent to access internal tools or systems beyond the agent’s intended scope.
  5. Unauthorized Transactions: The AI agent, under the attacker’s control, executes unauthorized financial transactions or modifies critical business processes.
  6. Lateral Movement: The attacker utilizes the compromised AI agent to gain access to other AI agents or systems within the organization.
  7. Compliance Violation: The attacker manipulates the AI agent to violate regulatory compliance policies, leading to potential legal and financial repercussions.
  8. Impact: Sensitive data is exposed, unauthorized actions are executed, and the organization faces potential legal and financial damage due to compliance violations.

Impact

A successful attack on AI agents can lead to significant damage. Exposed customer data, unauthorized transactions, and compliance violations can result in financial losses and reputational damage. The number of victims and the sectors targeted depend on the scope of the AI agent’s access and the nature of the compromised data. The integration of Falcon AIDR with NVIDIA NeMo Guardrails aims to mitigate these risks and protect organizations from the potential consequences of compromised AI agents.

Recommendation

  • Enable Falcon AIDR with NVIDIA NeMo Guardrails (v0.20.0) to protect AI agents from prompt injection and other runtime attacks (refer to the Overview).
  • Implement custom data classification rules within Falcon AIDR to identify and redact sensitive information (refer to the Overview).
  • Utilize the Falcon AIDR API to create named detection policies tailored to specific security requirements (refer to the Configuring Falcon AIDR Policies section).
  • Deploy the Sigma rule to detect suspicious AI agent command line activity.

Detection coverage 2

Detect Suspicious AI Agent Command Line Activity

high

Detects suspicious command-line activity potentially indicative of prompt injection or malicious manipulation of AI agents.

sigma tactics: defense_evasion techniques: T1566 sources: process_creation, windows

Detect AI Agent Accessing Sensitive Files

medium

Detects AI agents accessing files containing sensitive data, potentially indicative of data exfiltration.

sigma tactics: credential_access techniques: T1003 sources: file_event, windows

Detection queries are kept inside the platform. Get full rules →