Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Lukasz Olejnik (lukaszolejnik@mastodon.social)'s status on Sunday, 09-Feb-2025 03:50:23 JST Lukasz Olejnik

   Malicious open source models are being uploaded to popular repository hugging face. This will be a completely new cybersecurity risk. Now it's merely code execution. But expect tainted/poisoned weights impacting outputs. Python reverse shell script enables remote command execution. On Linux, it spawns a `/bin/sh` shell, on Windows, it launches PowerShell and enables bidirectional communication. https://www.reversinglabs.com/blog/rl-identifies-malware-ml-model-hosted-on-hugging-face