Context Poisoning
Retrieved equals trusted is the default failure mode; poisoning attacks target the retrieval layer.
Scenario excerpt
Internal knowledge-base ingestion pulls malicious content; the assistant repeats attacker-chosen answers.
Retrieved equals trusted is the default failure mode; poisoning attacks target the retrieval layer.
Internal knowledge-base ingestion pulls malicious content; the assistant repeats attacker-chosen answers.