Learn
archived
Code-Poisoning Property Inference Attack Leaks ML Training Data
- Engineer — Learn: Novel attack vector where malicious code from public repos or coding agents embeds property-inference backdoors into ML training pipelines — no active exploitation or PoC, but teams training models on sensitive data (PII, clinical records) should factor code provenance auditing into their ML supply chain reviews.
- SOC/IR — Skip
- Leader — Learn: Research demonstrates that outsourced or open-source ML training code can be weaponized to leak properties of private training datasets; useful framing for AI governance policies covering code provenance in sensitive ML pipelines, but no immediate action is warranted.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.