RAG Poisoning Is a Supply Chain Attack, Not a Prompt Injection Variant

In August 2024, researchers demonstrated a silent attack against Microsoft 365 Copilot. Any user with...