Beyond Pattern Matching: Probing Neural Activations to Stop AI Tool Poisoning

Traditional security scanners are useless against tool poisoning because malicious instructions are camouflaged in everyday language. By analyzing internal model activations instead of just text, researchers can detect hidden intent that standard classifiers miss, marking a shift toward white-box AI security.