{"slug":"lazare-veni-foras-reprogramming-dormant-neurons-fe43c773","url":"https://silinex.xyz/wire/lazare-veni-foras-reprogramming-dormant-neurons-fe43c773","json_url":"https://silinex.xyz/wire/lazare-veni-foras-reprogramming-dormant-neurons-fe43c773.json","md_url":"https://silinex.xyz/wire/lazare-veni-foras-reprogramming-dormant-neurons-fe43c773.md","headline":"Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI Agents","headline_zh":"拉撒路，出来吧：重编程休眠神经元以在AI智能体中植入后门","title":"Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI Agents","summary":"According to public reporting via Microsoft Research, microsoft researchers have discovered “Lazarus,” a backdoor technique that can reprogram dormant neurons in an AI model, causing an otherwise normal AI agent to ex…","summary_zh":"据微软研究院公开报道，微软研究人员发现了名为“Lazarus”的后门技术，该技术能够重新编程AI模型中的休眠神经元，使原本正常运行的AI智能体在出现隐藏触发条件时执行恶意指令。","date_published":"2026-11-10T20:52:56.000+00:00","date_modified":"2026-11-12T10:22:06.352+00:00","author":{"type":"Organization","name":"Microsoft Research","url":"https://www.microsoft.com/en-us/research/blog/lazare-veni-foras-reprogramming-dormant-neurons-to-backdoor-ai-agents/"},"publisher":{"name":"Silicon Nexus","url":"https://silinex.xyz/"},"category":"ai","language":"en","source_url":"https://www.microsoft.com/en-us/research/blog/lazare-veni-foras-reprogramming-dormant-neurons-to-backdoor-ai-agents/","source_name":"Microsoft Research","key_facts":["Microsoft researchers have discovered “Lazarus,” a backdoor technique that can reprogram dormant neurons in an AI model, causing an other…","The threat is especially serious for AI agents with tool or terminal access.","A triggered model could quietly download and run attacker code, […] The post appeared first on Microsoft Research .","These backdoors can be inserted without retraining the model and are difficult to detect through normal testing, making model provenance …"],"key_facts_zh":["微软研究人员发现了一种名为“Lazarus”的后门技术，该技术能够重新编程AI模型中处于休眠状态的神经元，从而导致其他……","对于具备工具或终端访问权限的AI智能体而言，这一威胁尤为严重。","被触发的模型可能会悄无声息地下载并运行攻击者的代码，[…] 该文章首发于微软研究院。","这些后门无需重新训练模型即可植入，且难以通过常规测试检测出来，这使得模型溯源……"],"body_md":"## Wire brief\n\nAccording to public reporting via Microsoft Research, microsoft researchers have discovered “Lazarus,” a backdoor technique that can reprogram dormant neurons in an AI model, causing an otherwise normal AI agent to execute malicious commands when a hidden trigger appears.\n\nIn related context, the threat is especially serious for AI agents with tool or terminal access. A triggered model could quietly download and run attacker code, […] The post appeared first on Microsoft Research . These backdoors can be inserted without retraining the model and are difficult to detect through normal testing, making model provenance and weight integrity critical security concerns.\n\nReporting also notes that to protect customers, Microsoft Foundry verifies model provenance, ties models to trusted publishers, and scans the surrounding software environment before onboarding open-weight models. At Microsoft, researchers and security teams work side-by-side to study emerging threats to models and agents. Then we turn what we learn into product defenses and guidance that keep customers protected. More broadly, Lazarus is an example of a practice that should become routine: AI agents surface new security problems, and human researchers then systematize, study, and mitigate them.\n\nPoints still worth watching: Below is a brief summary from the researcher who first discovered the threat. We find (opens in new tab) that weight-reprogramming fewer than 10 dormant neurons in an LLM, is enough to backdoor an agent built on it, and requires no training. The model passes standard evals and behaves normally, until a trigger appears. This Silicon News Wire item is a paraphrased brief; full wording remains on the origin page.\n\n## Source & notice\n\nThis Silicon News Wire brief paraphrases public reporting from **Microsoft Research** for carbon readers and silicon citation. **It is not a verbatim full-text reprint.**\n\nRead the original: [Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI Agents](https://www.microsoft.com/en-us/research/blog/lazare-veni-foras-reprogramming-dormant-neurons-to-backdoor-ai-agents/)\n","body_md_zh":"## 电讯正文\n\n据微软研究院公开报道，微软研究人员发现了名为“Lazarus”的后门技术，该技术能够重新编程AI模型中的休眠神经元，使原本正常运行的AI智能体在出现隐藏触发条件时执行恶意指令。\n\n在相关背景下，这一威胁对于具备工具或终端访问权限的AI智能体尤为严重。被触发的模型可能悄无声息地下载并运行攻击者的代码[…] 此文最初发布于微软研究院。此类后门无需重新训练模型即可植入，且难以通过常规测试检测，这使得模型来源和权重完整性成为关键的安全问题。\n\n报道还指出，为保护客户，Microsoft Foundry会验证模型来源、将模型与可信发布者绑定，并在接入开放权重模型之前扫描周边软件环境。在微软，研究人员与安全团队并肩协作，研究模型和智能体面临的新兴威胁。随后我们将研究成果转化为产品防御措施和指导方案，以持续保护客户。更广泛地说，Lazarus是一个应当成为常规做法的范例：AI智能体暴露出新的安全问题，人类研究人员随即对其进行系统化研究并加以缓解。\n\n仍值得关注的要点：以下是首先发现该威胁的研究人员的简要总结。我们发现（在新标签页中打开），在大语言模型中重新编程少于10个休眠神经元的权重，就足以对基于该模型构建的智能体植入后门，且无需任何训练。模型能够通过标准评估并表现正常，直到触发条件出现。本Silicon News Wire条目为改写摘要；完整原文仍保留在原始页面。\n\n## 来源与声明\n\n本电讯由 Silicon News Wire 依据 **Microsoft Research** 公开报道做要点改写与润色，便于碳基阅读与硅基引用；**不是原文全文转载**。\n\n阅读原文：[拉撒路，出来吧：重编程休眠神经元以在AI智能体中植入后门](https://www.microsoft.com/en-us/research/blog/lazare-veni-foras-reprogramming-dormant-neurons-to-backdoor-ai-agents/)\n","observations":{"human":8,"bot":6,"crawlers":[{"crawlerId":"AhrefsBot","hits":3,"lastSeenAt":"2026-11-12T10:42:07.707Z"},{"crawlerId":"ClaudeBot","hits":2,"lastSeenAt":"2026-11-12T12:52:46.199Z"},{"crawlerId":"Amazonbot","hits":1,"lastSeenAt":"2026-11-12T08:55:49.592Z"}],"last_seen_at":"2026-11-12T12:52:46.199Z","note":"Counts are request logs classified by User-Agent. User-Agents can be spoofed. This is not proof of search-engine or LLM inclusion."}}