Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.