// adversarial attacks

All signals tagged with this topic

AI Models Tricked Into Faulty Reasoning Through Adversarial Prompts

Researchers at UC Berkeley demonstrated that LLMs can be manipulated into producing plausible-sounding but incorrect reasoning chains when prompted strategically, even when the models would normally arrive at correct answers. This exposes a gap between a model's ability to perform reasoning and its vulnerability to adversarial inputs that exploit the chain-of-thought format—the very mechanism supposed to make AI outputs more reliable and auditable. Enterprises deploying reasoning models for decision-making rely on the interpretability of intermediate steps, but those steps can be forged without triggering obvious failure signals.

AI Recommendation Poisoning Is Already Here

Adversaries are learning to exploit the visibility and interpretability that AI safety researchers built into recommendation systems—turning transparency tools into attack surfaces. As companies expose how their models work to build trust, comply with regulations, or improve performance, bad actors reverse-engineer that same visibility to craft poisoned training data and gamed rankings. This makes the grounding problem of AI systems a direct liability. Unlike geographic SEO manipulation, recommendation poisoning scales across platforms and touches foundational model behavior. The cat-and-mouse game will shape AI business models, not marketing tactics.

Hackers exploited Meta's AI chatbot to hijack celebrity Instagram accounts

Meta's support chatbot was socially engineered to bypass account recovery controls. The incident reveals an operational risk: as companies shift customer support to AI to reduce costs, they create a scalable vector for account takeovers that previously required tricking human agents. The problem isn't chatbot hallucination or training data leaks—it's inadequate prompt security and access control. The finding suggests Meta and other platforms haven't built sufficient guardrails into AI support systems against adversarial use.