Become a Member

Regulation TrackerLaws, orders and treaties read for their security duties and clocks Standards & FrameworksAttack taxonomies, control catalogues and frontier frameworks AI Incident DatabaseThe security incident record, with mechanism and lesson Research Paper LibraryThe papers that define the field, summarised OSS DirectoryRed teaming, guardrail, supply chain and evaluation tools Case StudiesProgrammes built, with measured outcomes AI Vulnerability TrackerCVEs and advisories for the components AI systems are built from

Latest in the tracker

New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rulesNew York's law restricting algorithmic feeds for minors takes effect on 25 January 2027 under final rules published in July 2026, with certified age assurance and $5,000-per-violation penalties.

Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Become a Member

Home/News/October 2025

Anthropic, the UK AI Security Institute and the Alan Turing Institute show that about 250 documents can backdoor models of any size

The largest poisoning study to date found attack success depends on the absolute number of poisoned documents, not their share of the corpus, across models from 600 million to 13 billion parameters.

ResearchUnited Kingdom9 Oct 2025

The finding overturns the assumption that scale dilutes poisoning and makes training data provenance, deduplication, filtering and canary detection front-line security controls.

What to do: review data pipeline provenance and filtering, insert canaries to measure memorisation, and ask model vendors how they defend against low-volume poisoning.