Microsoft researchers demonstrate hidden backdoor technique for AI agents

Microsoft researchers demonstrated a backdoor technique called Lazarus that implants a hidden trigger in an AI model through small changes, causing an agent to execute an attacker's command when the trigger appears, Help Net Security reported on November 11, 2026. The technique requires no model retraining and lets the agent behave normally during standard safety evaluations. Microsoft said it has not observed threat actors weaponizing Lazarus but warned the research highlights a security concern for organizations that give AI agents access to terminals.

Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave normally during standard safety evaluations. The company has not observed threat actors weaponizing the technique, but says the research highlights a security concern for organizations that give AI agents access to terminals, … More https://www.helpnetsecurity.com/2026/11/11/microsoft-hidden-ai-backdoors-lazarus/ The post Microsoft researchers demonstrate hidden backdoor technique for AI agents https://www.helpnetsecurity.com/2026/11/11/microsoft-hidden-ai-backdoors-lazarus/ appeared first on Help Net Security https://www.helpnetsecurity.com .