New research demonstrates that backdoor behaviours introduced into LLMs during fine-tuning can persist through subsequent safety alignment procedures, including RLHF and adversarial training, posing significant supply chain risks.
A systematic study of membership inference attacks against foundation models finds that training data can be reconstructed from model weights with significantly higher accuracy than previously reported, with implications for GDPR compliance and PII handling in AI development.