Good stuff, at high level it seems security engineering aspects might be missing.
I put together content around threat modeling, infrastructure attacks as well as ML specific attacks with practical examples (like using adversarial robustness toolbox from Linux foundation).
Details here: https://github.com/wunderwuzzi23/mlattacks