Every article on The AI Downside filed under Cybersecurity — 4 and counting.
AI models memorise fragments of their training data and can be prompted to reproduce them, turning membership inference and data extraction into a genuine privacy risk. Here is how the leak works, and why it touches anyone whose data was scraped.
Coding assistants routinely suggest packages that don’t exist. Attackers register those exact hallucinated names on PyPI and npm and wait for the next developer to install them. It’s called slopsquatting, and it turns a model’s confident mistake into your malware.
A model is only as trustworthy as the text it learned from — and much of that text was scraped from a web anyone can write to. Here’s how training-time poisoning works, what the evidence actually shows, and why ‘just add more clean data’ doesn’t save you.
Hidden text in an email or a web page can hijack an AI agent into leaking your data or acting in your name. Prompt injection was named in 2022, sits atop every LLM security checklist, and no vendor claims to have solved it.
