Phantom Transfer: Data Poisoning can Survive Data-Level Defences

arXiv:2602.04899v2 Announce Type: replace-cross Abstract: We present a data poisoning attack -- Phantom Transfer -- with the property that, even if you know precisely how the poison was placed into an otherwise benign dataset, you cannot filter it out. We achieve this by modifying subliminal learning to work in real-world contexts and demonstrate...

Read the full article at the source.