Traditional attacks try to break into systems, but model poisoning changes how systems behave after they are trusted.