Hidden Cost Of Open Source Ai: How Malicious Models Are Compromising Enterprise Security
Zscaler, Thursday, September 4th, 2025
Discover how attackers weaponize AI models to infiltrate cloud environments - and how Zscaler AISPM helps you to stop them
As enterprises build their AI capabilities using pre-trained models, attackers have found a new way in: weaponized AI models hiding in plain sight among legitimate offerings. Attackers distribute malicious models through various methods: creating new models with hidden payloads, poisoning existing popular models, or uploading lookalike versions with similar names on model repositories like huggingface or similar portals -each containing sophisticated exploits ready to activate upon loading.