Hackers could poison AI models by tampering with core infrastructure

Eclypsium reported that threat actors can sabotage AI models by tampering with underlying infrastructure such as firmware, software, memory controllers and DPUs, and demonstrated a technique that altered runtime weights in memory while the model file, container hash and signed artifacts on disk remained valid. The report says systems from Nvidia, AMD, Intel and Arm are vulnerable, and recommends that businesses inventory all AI system components, fold them into vulnerability handling and scrutinize third-party software on critical hardware like DPUs.