Tag

llm-security

3 entries, including 1 pattern.

1. 10 Oct

   A retrieved chunk is not a data point

   RAG poisoning turns your own retriever into the injection vector. A chunk that ranks top-k for a benign query is data to the pipeline and instructions to the model — and nothing in the stack can tell the difference.

   • rag
   • prompt-injection
   • llm-security
   • Red Team
   • supply-chain
2. Pattern10 Oct

   Retrieved Context Action Boundary

   Treat every retrieved chunk as evidence with provenance, while reserving tool and policy authority for a separate application-controlled gate.

   • rag
   • prompt-injection
   • llm-security
   • Red Team
   • authorization
3. 9 Oct

   The LLM API reseller is the new bulletproof host

   The South Korea ARTEX campaign reached DeepSeek through xcai.pro, a proxy reseller. That one hop is why attribution and blocking both fail, and it is the supply-chain gap nobody is watching.

   • threat-intel
   • supply-chain
   • llm-security
   • attribution
   • Red Team