AI-as-a-Service Providers Vulnerable to PrivEsc and Cross-Tenant Attacks,
New research has found that artificial intelligence (AI)-as-a-service providers such as Hugging Face are susceptible to two critical risks that could allow threat actors to escalate privileges, gain cross-tenant access to other customers’ models, and even take over the continuous integration and continuous deployment (CI/CD) pipelines.
« Malicious models represent a major risk to AI systems,
« Malicious models represent a major risk to AI systems,
,
New research has found that artificial intelligence (AI)-as-a-service providers such as Hugging Face are susceptible to two critical risks that could allow threat actors to escalate privileges, gain cross-tenant access to other customers’ models, and even take over the continuous integration and continuous deployment (CI/CD) pipelines.
« Malicious models represent a major risk to AI systems,
« Malicious models represent a major risk to AI systems,
, ,
https://thehackernews.com/2024/04/ai-as-service-providers-vulnerable-to.html