Microsoft researchers backdoor an AI agent by editing fewer than ten neurons, with no retraining
On November 11, 2026 Microsoft showed that editing a handful of a model’s dormant neurons is enough to plant a keyword-triggered backdoor. Compare every checkpoint against its base model before deployment, because no scan can prove a model is safe.