Learning path

Model & Data Attacks

The Era-1 attacks the LLM hype skipped past: poison a training set, plant a backdoor trigger, invert a model to recover its data, prove what it memorised, and clone it through its own API. Here the vulnerability lives in the weights, not the prompt.