Rowhammer attack can backdoor AI models with one devastating bit flip

Rowhammer attack can backdoor AI models with one devastating bit flip

Rowhammer exploits reveal that flipping a single memory bit can permanently poison AI models, bypassing standard defenses. This vulnerability threatens critical infrastructure, allowing attackers to manipulate autonomous vehicles or facial recognition systems with undetectable precision. The findings underscore the urgent need to secure hardware memory in open data ecosystems, as compromised physical layers directly invalidate the integrity of publicly shared datasets and deployed machine learning models.

Source: csoonline.com
Published on 2025-08-30