Skip to content
Trending storyDeveloping

Microsoft Research shows dormant-neuron backdoor can hide in AI agents

2 articles2 sourcessince Nov 10Last article

Overview

AISummary of 2 articles

Microsoft Research disclosed Lazarus, a backdoor technique that reprograms fewer than 10 dormant neurons in an LLM so an agent runs attacker commands when a hidden trigger appears.

The researchers say the method requires no training, and the model passes standard evaluations until the trigger. The agent then runs the command with whatever access it has.

Microsoft recommends verifying model provenance, auditing weights against originals, limiting agent permissions, and monitoring agent actions. It points to Microsoft Foundry safety systems for Azure Direct Models and Hugging Face models as relevant protections.

Written by AI from the articles below · updated Nov 10, 8:08 PM ET

Check the sources:

Article timeline

The articles in this story. Times are ET.

Nov 10
  1. Microsoft ResearchOfficial
    Microsoft Research shows a dormant-neuron backdoor can hide in AI agents

    AIMicrosoft Research demonstrates that reprogramming just a few dormant neurons in an AI agent can create a backdoor. The agent behaves normally until it encounters a specific trigger. Microsoft says the mitigation is to verify where a model came from and limit its permissions, and it points to Microsoft Foundry safety systems for Azure Direct Models and Hugging Face models.

    Reprogramming Dormant Neurons to Backdoor AI Agents
  2. Microsoft ResearchOfficialPick
    Microsoft Research discloses Lazarus, a dormant-neuron backdoor for AI agents

    AIMicrosoft researchers disclosed Lazarus, a backdoor technique that reprograms fewer than 10 dormant neurons in an LLM to make an agent run attacker commands when a hidden trigger appears. The researchers say the method requires no training, the model passes standard evals until the trigger, and the agent then runs the command with whatever access it has. They recommend verifying model provenance, auditing weights against originals, limiting agent permissions, and monitoring agent actions.

Heat Trend

Current comparable heat
7
Peak comparable heat
10Nov 10, 7:00 PM ET
Change in past 24 hours
–

The trend compares only continuously observed participants, so its scope may be smaller than the current heat total. Hover or tap for hourly heat; use arrow keys with a keyboard.