Supply Chain
-
Web-Scale Dataset Poisoning: Split-View and Frontrunning
Split-view attacks exploit mutable web content, while frontrunning targets timed snapshots to poison datasets without training pipeline access.
-
Indirect Prompt Injection in RAG Pipelines
How attackers embed malicious instructions in documents that get retrieved into LLM context — and why RAG makes prompt injection a supply-chain problem.
-
Supply Chain Attacks on AI Models: Poisoning and Backdoors
How attackers compromise models before production through dataset poisoning, malicious fine-tuning, and serialization exploits, and how to detect it.