{
 "id": "AIR-2025-0054",
 "slug": "ai-model-tampering-risk-via-exposed-container-registries",
 "title": "AI Model Tampering Risk via Exposed Container Registries",
 "summary": "Security researchers identified thousands of misconfigured private container registries exposing unauthenticated AI model files. This exposure left sensitive models vulnerable to unauthorized inspection and malicious modification.",
 "type": "attack_on_ai",
 "categories": [
  "supply_chain",
  "infra_vuln"
 ],
 "severity": 1,
 "targets": [
  "open_weight_model"
 ],
 "products": [
  "private container registries"
 ],
 "incident_date": "2023-09-26",
 "incident_date_precision": "day",
 "first_reported": "2025-04-22",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0028",
   "publisher": "MITRE ATLAS",
   "title": "AI Model Tampering via Supply Chain Attack",
   "published_at": "2025-04-22"
  },
  {
   "url": "https://trendmicro.com/vinfo/br/security/news/cyber-attacks/silent-sabotage-weaponizing-ai-models-in-exposed-containers",
   "publisher": "Trend Micro",
   "title": "Silent Sabotage: Weaponizing AI Models in Exposed Containers",
   "published_at": "2025-04-22"
  },
  {
   "url": "https://trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/exposed-container-registries-a-potential-vector-for-supply-chain-attacks",
   "publisher": "Trend Micro",
   "title": "Exposed Container Registries: A Potential Vector for Supply-Chain Attacks",
   "published_at": "2025-04-22"
  },
  {
   "url": "https://trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/mining-through-mountains-of-information-and-risk-containers-and-exposed-container-registries",
   "publisher": "Trend Micro",
   "title": "Mining Through Mountains of Information and Risk: Containers and Exposed Container Registries",
   "published_at": "2025-04-22"
  },
  {
   "url": "https://dreher.in/blog/unprotected-container-registries",
   "publisher": "dreher.in",
   "title": "The Growing Threat of Unprotected Container Registries: An Urgent Call to Action",
   "published_at": "2025-04-22"
  }
 ],
 "source_count": 5,
 "confidence": 0.9,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "supply-chain",
  "misconfiguration",
  "container-registry"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}