Microsoft researchers demonstrate hidden backdoor technique for AI agents

Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave normally during standard safety evaluations. The company has not observed threat actors weaponizing the technique, but says the research highl…

بدافزار و آلودگی
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
SOCRadar

October 2026: Binance Heist, ConnectWise Breach, and More

The major cyber attacks of October 2026 were some of the year’s most consequential, and many of them started with access their victims already trusted. A cryptocurrency exchange lost billions through compromised engineer workstations in the Binance hot wallet heist, a backup provider’s cloud credential reached hundreds of Microsoft 365 tenants in the ConnectWise breach, […]

Help Net Security

Embed Security lets analysts teach its AI SOC Platform how to investigate

Embed Security announced new capabilities that let security teams teach Embed how they investigate, what matters in their environment, and how to improve their detections. With customer-built iSteps, expanded NoiseIQ Memories, and Detection Engineering, organizations can extend Embed’s built-in security expertise with their own knowledge and operating practices. Rather than programming workflows, analysts can teach E…

SOCRadar

November 2026 Patch Tuesday: 1,094 Flaws, One Exploited

Microsoft’s November 2026 Patch Tuesday, released on November 10, 2026, fixes 1,094 vulnerabilities across Windows, Office, SQL Server, Exchange Server, SharePoint, Azure services, and developer tools. The total falls below October’s Patch Tuesday (1,413 flaws) but still makes this the second-largest monthly release on record. The release includes one zero-day and over 60 critical-rated vulnerabilities. […]