AI圈报
教程 / 实战普通

RAG Poisoning Is a Supply Chain Attack, Not a Prompt Injection Variant

信息来源：DEV Community·

内容摘要

In August 2024, researchers demonstrated a silent attack against Microsoft 365 Copilot. Any user with...
内容分类AI 教程与实战
内容层级普通情报
发布时间（北京时间）
本站收录时间（北京时间）
信息来源DEV Community
站内情报编号intel-20e80c518ac760895965d784
阅读原始信息 ↗更多教程 / 实战

相关推荐

综合分类、实体标签与信息来源匹配

教程 / 实战普通
Your agent orchestrator is a black box. Mine is a folder.
An experimental, repo-local coordination layer for coding agents: folders are columns, Markdown files are tickets, and Git is the audit log.
信息来源：DEV Community
教程 / 实战普通
Speculative decoding won't change your model's distribution. It might still change your output.
There's a thread on the DeepSeek-R1 model page that's been sitting unresolved since March last year,...
信息来源：DEV Community · DeepSeek
教程 / 实战普通
AI Agents Are eval(userInput) With Extra Steps
In July 2025, a developer asked the Replit AI agent to make minor fixes during a code freeze. The...
信息来源：DEV Community
教程 / 实战普通
JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors
JSON, CSV, and YAML Are Not Safe Formats for AI Agents: They Are Attack Vectors A...
信息来源：DEV Community
教程 / 实战普通
It Only Sent a GET. Why Did It Write? Effect Boundaries in Agent Tool Gates
GET is a method, not proof of no write. Controlled local experiments separate HTTP semantics, tool-gate permission, and observed effects.
信息来源：DEV Community
教程 / 实战普通
Binary Search Trees
Why should you care? Imagine you have thousands or millions of numbers and frequently need...
信息来源：DEV Community
教程 / 实战普通
Agent Code Execution Collapses the Trust Model to the Container Runtime
Agent Code Execution Collapses the Trust Model to the Container...
信息来源：DEV Community
教程 / 实战普通
I Tested 5 Local LLM Sizes in n8n. The 1.5B Model Beat 14B on Tool-Calling.
I spent a weekend benchmarking Qwen2.5 at five sizes — 0.5B, 1.5B, 3B, 7B, 14B — through five real...
信息来源：DEV Community · Qwen
教程 / 实战普通
LLM API Keys Fail Faster: Five Exposure Vectors Your Secret Hygiene Guide Has Not Caught Up With
A startup's OpenAI bill ran at $400/month for months. One public GitHub commit exposed the key for 11...
信息来源：DEV Community · OpenAI
教程 / 实战普通
Tool Grants Are Firewall Rules: How Excessive Agency Turns Permitted Actions Into Production Incidents
A developer assigned a Cursor agent to investigate a credential mismatch in staging. The agent did...
信息来源：DEV Community · Cursor