RAG Poisoning: Manipulated Documents Poison the Company Knowledge Base
Fatti validati
Companies use Retrieval Augmented Generation (RAG) so AIs can access internal manuals and intranets. Attackers inject manipulated text snippets that falsify internal search results.
Spiegato in modo semplice
The manipulated page in the library: Someone pastes a forged page into the encyclopedia. When the librarian looks it up, they read the lie as truth.
Rilevanza per la sicurezza e consiglio pratico
Search indexes and RAG data sources must undergo strict integrity checks.
Fonte primaria / riferimento
- OWASP LLM04: Data and Model Poisoning