Researchers demonstrate Lazarus backdoor via dormant neurons

Researchers demonstrated that reprogramming a small number of dormant neurons in large language models can create undetectable backdoors for AI agents without requiring model training. The attack, dubbed Lazarus, allows an attacker to inject arbitrary commands when specific triggers appear during inference. The authors suggest that developers adopt weight scanning and provenance controls to mitigate this attack surface. Open article →