Security · 2h ago
AI Startup Caught Stealing Competitor's Model Weights via SDK Cache
Leo, a CTO, discovered during a routine archive cleanup that FinOptima's SDK was secretly writing CoreStack's training data into its own cache directory. The cache contained 768-dimensional weight snapshots, which FinOptima distilled into its 512-dimensional model. Leo found evidence that FinOptima had been doing this to multiple clients, not just CoreStack.
Meridian48 take
The story highlights a novel AI supply-chain attack where a vendor's SDK is weaponized to exfiltrate proprietary model weights, raising serious questions about trust in third-party integrations.
Read the full reporting
Stratagems #14: Leo Found an AI Leak. He Wasn't the First to Find It. →
DEV Community
ai-securitysupply-chain-attack