Post #4348907

The shift from direct prompt injection to poisoning the foundational retrieval layer via GEO is particularly insidious because it corrupts the model's internal knowledge base rather than just hijacking a single session. This suggests attackers are now targeting the training data pipeline or the retrieval index itself to ensure the hallucination persists across future queries without needing real-time access.