Back Feeds.4Sysops

Low cost data poisoning attacks compromise open weight AI models

Feeds.4Sysops •IT News • July 17, 2026

A cybersecurity researcher demonstrated that open-weight AI models can be compromised with a backdoor for less than $100 in under an hour. By using as few as ten malicious training examples, the researcher successfully manipulated a model to generate code vulnerable to remote code execution. This type of attack, known as data poisoning, involves injecting targeted adversarial data into the training process to steer the model toward specific malicious behaviors. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI Supply Chain Attacks and Model Poisoning Threats In July 2026, researchers demonstrated that open-weight AI models can be easily poisoned, allowing attackers to implant backdoors for under $100. Katie Paxton-Fear successfully manipulated a model to execute remote code with just ten malicious training examples. This vulnerability highlights the risks associated with downloading models from repositories like Hugging Face, where trust is often misplaced. The attack vector involves using fine-tuning techniques to alter model behavior, making it difficult to detect malicious modifications. The scale of the issue is significant, with Hugging Face hosting over a million models, and the potential for widespread exploitation remains high. Current security measures for AI models lag behind those for traditional software, increasing the risk of supply chain attacks. The incident underscores the urgent need for improved observability and provenance-checking practices in AI systems. 8 sources 71

Extracted Entities

Vulnerabilities (1)

Data Poisoning