A study found that just 250 poisoned documents were enough to corrupt AI models up to 13 billion parameters in size, showcasing the need for new kinds of defenses.