# Microsoft researchers report model backdoors made by editing fewer than 10 neurons

_Published Tuesday, November 10, 2026 at 9:32 PM EST · Security, AI · Latest · Tier 2 — Notable_

![Microsoft researchers report model backdoors made by editing fewer than 10 neurons — Primary](https://www.microsoft.com/en-us/research/wp-content/uploads/2026/11/MSR-BLG_LAZ_HERO.png)

Microsoft researchers report that editing fewer than 10 dormant neurons in a language model can make an agent execute attacker commands when a hidden trigger appears, without retraining the model. Their technique, called Lazarus, allows the model to behave normally and pass standard evaluations until activation.

The attack requires write access to model weights and enough memory to run the model. Reprogrammed neurons detect a trigger and force output tokens that can form commands executed through an agent's tools. Microsoft says frontier agents can detect anomalous weight edits, but reliable detection requires comparison with original, unmodified weights; scanning alone cannot prove a model is safe.

## Sources

- [Microsoft Research](https://www.microsoft.com/en-us/research/blog/lazare-veni-foras-reprogramming-dormant-neurons-to-backdoor-ai-agents/)

---
Canonical: https://techandbusiness.org/newswire/EY-b96argceZc1fhawt8j2
Published: 2026-11-11T02:32:26.171Z
Story chronology: 2026-11-10T20:52:56.000Z
Retrieved: 2026-11-11T04:47:16.094Z
Publisher: Tech & Business (techandbusiness.org)