AI Case Studies

ShadowRay - AI Case Study

ShadowRay - AI Case Study is an AI security case study covering type: incident; target: Multiple systems; actor: Ray. It includes 7 case steps.

Confusing Antimalware Neural Networks - AI Case Study

Confusing Antimalware Neural Networks - AI Case Study is an AI security case study covering type: exercise; target: Kaspersky's Antimalware ML Model; actor...

PoisonGPT - AI Case Study

PoisonGPT - AI Case Study is an AI security case study covering type: exercise; target: HuggingFace Users; actor: Mithril Security Researchers. It includes 7...

Supply Chain Compromise via Poisoned ClawdBot Skill - AI Case Study

Supply Chain Compromise via Poisoned ClawdBot Skill - AI Case Study is an AI security case study covering type: exercise; target: ClawdBot (now OpenClaw); ac...

Data Exfiltration via an MCP Server used by Cursor - AI Case Study

Data Exfiltration via an MCP Server used by Cursor - AI Case Study is an AI security case study covering type: exercise; target: Cursor; actor: Backslash Sec...

Microsoft Azure Service Disruption - AI Case Study

Microsoft Azure Service Disruption - AI Case Study is an AI security case study covering type: exercise; target: Internal Microsoft Azure Service; actor: Mic...

AI Model Tampering via Supply Chain Attack - AI Case Study

AI Model Tampering via Supply Chain Attack - AI Case Study is an AI security case study covering type: exercise; target: Private Container Registries; actor...

Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution - AI Case Study

Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution - AI Case Study is an AI security case study covering type: exercise; target: Cl...

Face Identification System Evasion via Physical Countermeasures - AI Case Study

Face Identification System Evasion via Physical Countermeasures - AI Case Study is an AI security case study covering type: exercise; target: Commercial Face...

LLMSmith: RCE Vulnerabilities in LLM-Integrated Applications - AI Case Study

LLMSmith: RCE Vulnerabilities in LLM-Integrated Applications - AI Case Study is an AI security case study covering type: exercise; target: LLM Integration Fr...

Achieving Code Execution in MathGPT via Prompt Injection - AI Case Study

Achieving Code Execution in MathGPT via Prompt Injection - AI Case Study is an AI security case study covering type: exercise; target: MathGPT (https://mathg...

Attack on Machine Translation Services - AI Case Study

Attack on Machine Translation Services - AI Case Study is an AI security case study covering type: exercise; target: Google Translate, Bing Translator, Systr...

Backdoor Attack on Deep Learning Models in Mobile Apps - AI Case Study

Backdoor Attack on Deep Learning Models in Mobile Apps - AI Case Study is an AI security case study covering type: exercise; target: ML-based Android Apps; a...

Financial Transaction Hijacking with M365 Copilot as an Insider - AI Case Study

Financial Transaction Hijacking with M365 Copilot as an Insider - AI Case Study is an AI security case study covering type: exercise; target: Microsoft 365 C...

Data Exfiltration via Agent Tools in Copilot Studio - AI Case Study

Data Exfiltration via Agent Tools in Copilot Studio - AI Case Study is an AI security case study covering type: exercise; target: Copilot Studio Customer Ser...

Organization Confusion on Hugging Face - AI Case Study

Organization Confusion on Hugging Face - AI Case Study is an AI security case study covering type: exercise; target: Hugging Face users; actor: threlfall_hax...

OpenClaw Command & Control via Prompt Injection - AI Case Study

OpenClaw Command & Control via Prompt Injection - AI Case Study is an AI security case study covering type: exercise; target: OpenClaw; actor: HiddenLayer. I...