Hackers could poison AI models by tampering with core infrastructure

Security firm Eclypsium reports that AI models can be manipulated by tampering with the firmware, drivers and management hardware beneath them. In its demonstration, selected weights were altered in memory after integrity checks ran, while the model file, hash and signatures on disk stayed valid. Eclypsium says Nvidia, AMD, Intel and Arm systems are affected, and recommends DPU-based policy enforcement, component inventories and scrutiny of third-party software. Cybersecurity Dive's account could not be independently verified, and the research was done with Nvidia.