AML.T0010

MITRE ATLAS / AI Supply Chain Compromise

Adversaries gain initial access by compromising the parts of the supply chain specific to AI: the data, the model, the ML software stack, or the hardware. A compromise upstream reaches every system that consumes the artifact.

Think of it likeContaminating something at the bottling plant rather than breaking into each house that buys a bottle.

In plain English

AI systems are assembled from other people's datasets, weights, and libraries. Compromising one widely used component gets the attacker into every product built on top of it.