AML.T0010
AI Supply Chain Compromise

MITRE source definition

Adversaries may gain initial access to a system by compromising the unique portions of the AI supply chain. This could include [Hardware](/techniques/AML.T0010.000), [Data](/techniques/AML.T0010.002) and its annotations, parts of the [AI Software](/techniques/AML.T0010.001) stack, or the [Model](/techniques/AML.T0010.003) itself. In some instances the attacker will need secondary access to fully carry out an attack using compromised components of the supply chain.

Source modified 2026-05-27. Reproduced from the pinned ATLAS release; inline technique links resolve to local reference pages.

Parent, sub-techniques and ATT&CK references

• AML.T0010.000 Hardware
• AML.T0010.001 AI Software
• AML.T0010.002 Data
• AML.T0010.003 Model
• AML.T0010.004 Container Registry
• AML.T0010.005 AI Agent Tool

Source-backed defensive context

MITRE mitigations

• AML.M0014 Verify AI Artifacts
• AML.M0020 Generative AI Guardrails
• AML.M0023 AI Bill of Materials
• AML.M0035 AI Red Team

MITRE case studies

• AML.CS0031 Malicious Models on Hugging Face · Incident

These are explicit source relationships, not independently reproduced incidents or validated detection coverage.

Simulation and telemetry boundary

This is a technique reference page, not a runnable simulation. No ATLAS-specific telemetry mapping, local attack execution or detector validation is asserted. MITRE maturity describes its source evidence, not a 1200km lab result.

For broader context—not technique-specific control mappings—see AI Security, AI Security Course, and detection-validation methodology.

Provenance and attribution

Immutable MITRE ATLAS source · Import provenance · Attribution and transformation notice · Apache License 2.0

Copyright 2021-2026 MITRE. Source text and explicit relationships are retained; navigation, formatting and local links are provided by 1200km.

No explicit relationship in this pinned source.