Microsoft Research shows dormant-neuron backdoor can hide in AI agents
Overview
Microsoft Research disclosed Lazarus, a backdoor technique that reprograms fewer than 10 dormant neurons in an LLM so an agent runs attacker commands when a hidden trigger appears.
The researchers say the method requires no training, and the model passes standard evaluations until the trigger. The agent then runs the command with whatever access it has.
Microsoft recommends verifying model provenance, auditing weights against originals, limiting agent permissions, and monitoring agent actions. It points to Microsoft Foundry safety systems for Azure Direct Models and Hugging Face models as relevant protections.
Written by AI from the articles below · updated Nov 10, 8:08 PM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
Microsoft Research@MSFTResearchOfficialMicrosoft Research shows a dormant-neuron backdoor can hide in AI agentsAIMicrosoft Research demonstrates that reprogramming just a few dormant neurons in an AI agent can create a backdoor. The agent behaves normally until it encounters a specific trigger. Microsoft says the mitigation is to verify where a model came from and limit its permissions, and it points to Microsoft Foundry safety systems for Azure Direct Models and Hugging Face models.

- Microsoft ResearchOfficialPickMicrosoft Research discloses Lazarus, a dormant-neuron backdoor for AI agents
AIMicrosoft researchers disclosed Lazarus, a backdoor technique that reprograms fewer than 10 dormant neurons in an LLM to make an agent run attacker commands when a hidden trigger appears. The researchers say the method requires no training, the model passes standard evals until the trigger, and the agent then runs the command with whatever access it has. They recommend verifying model provenance, auditing weights against originals, limiting agent permissions, and monitoring agent actions.
Heat Trend
- Current comparable heat
- 7
- Peak comparable heat
- 10Nov 10, 7:00 PM ET
- Change in past 24 hours
- –
The trend compares only continuously observed participants, so its scope may be smaller than the current heat total. Hover or tap for hourly heat; use arrow keys with a keyboard.