Isolation or Hallucination - Hacking AI Infrastructure Providers for Fun and Weights

Explore critical security vulnerabilities in AI-as-a-Service platforms through this Black Hat conference presentation that reveals novel attack techniques successfully demonstrated on major providers like Hugging Face and Replicate. Learn how security researchers exploited malicious models to breach security boundaries, achieve cross-tenant access to private customer data, and gain global write privileges that enabled supply-chain attacks through model backdooring. Discover the unique attack surface of AI infrastructure providers while understanding essential mitigation and detection strategies for these vulnerabilities. Security researchers Hillai Ben-Sasson and Sagi Tzadik from Wiz demonstrate how they investigated leading AI service providers including Microsoft Azure and SAP to expose potential risks to proprietary models, datasets, weights and user prompts in this 37-minute technical deep dive.