We don't yet know of robust defenses against these attacks. We haven't yet seen poisoning attacks on modern [machine learning] models in the wild, but it could be just a matter of time," says Vitaly Shmatikov, a professor at Cornell University who studies AI model security and was not involved in the research. "The time to work on defenses is now," Shmatikov adds.