The AI backdoor your security stack is not built to see