Tagged:

2 posts

• Poisoning the Knowledge Base: Adversarial Document Injection into RAG Vector Stores

  RAG can be weaponized by anyone who can write to the corpus. This post maps the attack taxonomy — two empirically validated classes (PoisonedRAG, BadRAG), one extrapolated operational pattern, and persistent corpus injection — with real-world ingestion surfaces and a defender checklist.

  Jul 8, 2026 rag rag-security vector-stores adversarial-ml threat-modeling defense-patterns prompt-injection

• Poisoning the Well: Memory and RAG Attacks Against Long-Context AI Systems

  As AI agents gain persistent memory through vector stores and RAG pipelines, a new attack surface emerges: injecting malicious content into the agent's long-term knowledge to control future behavior. This post maps the taxonomy of memory poisoning attacks — from retrieval manipulation to cross-session contamination — and what defenders need to audit before production.

  Jun 27, 2026 rag-security memory-poisoning prompt-injection vector-stores agent-security threat-modeling