Backdoor

Address OWASP LLM04:2025 Data and Model Poisoning. Data Poisoning occurs when training + fine-tuning + retrieval data is intentionally + unintentionally contaminated to bias + degrade + or backdoor the resulting model.

The control team must ensure that at the end of testing the testers and threat intelligence provider securely delete compromised passwords, credentials and keys, securely tell the entity which accounts were compromised and securely collect, store and dispose o...

Choose third-party libraries, middleware and hardware from suppliers practising security by design and by default so that no backdoors enter; include hardware cyber risk (such as rogue firmware) in supply chain risk assessment;

Contracts with ASPs mandate: changing default passwords; no trivial passwords; centralised IAM with strong passwords, risk-based MFA, least privilege and SoD; privileged access through PIM or IAM; network segregation;

Where affected systems must stay in production, the team applies temporary fixes while clean replacements are built: removing accounts and backdoors left by the attacker, patching affected and neighbouring systems, and other work limiting escalation while busi...

Affected systems are rebuilt to remove malware, attacker accounts and backdoors; all affected hosts and exploited vulnerabilities are identified and patched, including neighbouring systems;