AI Model Tampering Risk via Exposed Container Registries

# AI Model Tampering Risk via Exposed Container Registries

https://gcdradar.vercel.app/incidents/ai-model-tampering-risk-via-exposed-container-registries · AIR-2025-0054 · closed 2025-05-06

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2025-04-22 (happened 2023-09-26)
- AI role: Attack on AI

## Summary

Security researchers identified thousands of misconfigured private container registries exposing unauthenticated AI model files. This exposure left sensitive models vulnerable to unauthorized inspection and malicious modification.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-04-22: The Growing Threat of Unprotected Container Registries: An Urgent Call to Action (https://dreher.in/blog/unprotected-container-registries)
- 2025-04-22: Mining Through Mountains of Information and Risk: Containers and Exposed Container Registries (https://trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/mining-through-mountains-of-information-and-risk-containers-and-exposed-container-registries)
- 2025-04-22: Exposed Container Registries: A Potential Vector for Supply-Chain Attacks (https://trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/exposed-container-registries-a-potential-vector-for-supply-chain-attacks)
- 2025-04-22: Silent Sabotage: Weaponizing AI Models in Exposed Containers (https://trendmicro.com/vinfo/br/security/news/cyber-attacks/silent-sabotage-weaponizing-ai-models-in-exposed-containers)
- 2025-04-22: AI Model Tampering via Supply Chain Attack (https://atlas.mitre.org/studies/AML.CS0028)

## Sources

- 2025-04-22 MITRE ATLAS: AI Model Tampering via Supply Chain Attack https://atlas.mitre.org/studies/AML.CS0028
- 2025-04-22 Trend Micro: Silent Sabotage: Weaponizing AI Models in Exposed Containers https://trendmicro.com/vinfo/br/security/news/cyber-attacks/silent-sabotage-weaponizing-ai-models-in-exposed-containers
- 2025-04-22 Trend Micro: Exposed Container Registries: A Potential Vector for Supply-Chain Attacks https://trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/exposed-container-registries-a-potential-vector-for-supply-chain-attacks
- 2025-04-22 Trend Micro: Mining Through Mountains of Information and Risk: Containers and Exposed Container Registries https://trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/mining-through-mountains-of-information-and-risk-containers-and-exposed-container-registries
- 2025-04-22 dreher.in: The Growing Threat of Unprotected Container Registries: An Urgent Call to Action https://dreher.in/blog/unprotected-container-registries

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.