Your AI Agent Could Run a Command Hidden in a Lazarus Model
Microsoft Research's Lazarus attack backdoors an AI agent by editing fewer than 10 dormant neurons, with no retraining. Normal evals miss it; diffing against the original weights and limiting agent permissions catch or contain it.
November 11, 2026 · 9 min read