CompTIA SecAI+ Domain 2.1: MITRE ATLAS & OWASP LLM

SQL Injection won't save you when the database is a Vector Store. Welcome to Domain 2 of the CompTIA SecAI+ course. This domain makes up 40% of the entire exam, making it the most critical section to master.

In this video, we map the new battlefield. We explain why traditional frameworks like MITRE ATT&CK fail against AI, and introduce the new standard: MITRE ATLAS. We also break down the OWASP LLM Top 10, the risks of downloading models from Hugging Face, and how to apply STRIDE threat modeling to Neural Networks.

🎓 In this video, you will learn:

MITRE ATLAS vs. ATT&CK: The difference between "Initial Access" and "ML Model Access."

OWASP LLM Top 10: An intro to Prompt Injection, Insecure Output Handling, and Data Poisoning.

New Risk Frameworks: The MIT AI Risk Repository and the CVE AI Working Group.

Supply Chain Security: Why "Pickle" files (.pkl) are dangerous and how Hugging Face is the new attack surface.

AI Threat Modeling: Mapping STRIDE to AI concepts (e.g., Tampering = Training Data Poisoning).

⏱️ Timestamps: 00:00 Intro: Why Web Security Fails in AI 01:00 MITRE ATLAS vs. MITRE ATT&CK (Exam Critical) 02:00 The MIT AI Risk Repository & CVEs 02:30 The OWASP LLM Top 10 03:20 Supply Chain Risk: Hugging Face & Pickle Files 04:05 Threat Modeling: STRIDE for AI 04:40 Homework Assignment

​📚 Resources & Support

​🎓 FREE Interactive Learning Tools

Don't just watch—practice. Access our new browser-based tools to test your skills live.

​AI-Powered Exam Simulators: https://secguy.org/exam-simulators

​Python for Security Labs: https://secguy.org/python-practice

​Mock Interview Board: https://secguy.org/mock-interview

​💬 Join the Squad

Connect with other industry veterans and students in our new dedicated study group.

​Official Discord: https://secguy.org/discord-chat

​📚 Download Course Materials

Get the SecAI+ Cheat Sheet (including the MCP Architecture Diagram & Jetson specs) and full course slides directly from the academy.

​Access Here: https://secguy.org/courses

#SecAIplus #CompTIA #Cybersecurity #MITREATLAS #OWASP #LLMSecurity #AIProtection #SecGuy #TechEducation