π₯Coming This Month: Beginner AI AWS Cloud Project (For Your CV!)
Iβm excited to share that I recently landed a dream collaboration with Hack The Box, and created a brand new video diving into how Red Teamers are starting to use AI in offensive security.
Hereβs a high level look at what I cover, but I definitely recommend watching the full video to see it all in action:
Model poisoning involves tampering with the actual parameters of an AI model, not just the training data. In a federated learning setup, a single malicious participant can inject poisoned updates to create hidden backdoors or distort behavior in subtle ways, and the global system might never notice. For red teamers, this is about precision control of model logic.
This technique corrupts the training data itself. Whether through mislabeling, fake data injection, or subtle manipulation, attackers shape what the model learns. The goal is to mislead AI decision making, causing biased outputs or even activating hidden behaviors with specific triggers.
Model inversion is about reverse engineering inputs from model outputs. By analysing responses, attackers can reconstruct sensitive training data, such as confidential records or proprietary information. Itβs a growing privacy threat, especially where AI systems are accessible to the public or deployed in production.
AI now helps generate ultra realistic phishing emails, fake voices, and even cloned faces. Attackers can impersonate trusted individuals on video calls or create believable written communications that bypass traditional awareness training. For red teams, itβs a powerful tool to test organisational resilience against modern manipulation.
Not so much an attack vector butβ¦. When attackers compromise AI models at scale, especially in critical infrastructure or financial systems, the result can be long term, undetected manipulation. These subtle changes build over time, creating systemic vulnerabilities while flying under the radar.
Think wide spread disinformationβ¦.
Click Here to watch the videoπ₯
Thank you for reading: Keep it secure, keep it light-hearted!
WJPearce - CyberBrew
Cant wait for the project for my CV π
Iβve never known a technology that hasnt been weaponised by the black hats. This is a great guide to know what to look out for!