# Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons

**URL:** <https://forums.thehomestack.io/t/microsoft-researchers-show-ai-agents-can-be-backdoored-by-editing-fewer-than-10-neurons/26946>\
**Category:** The Hacker News\
**Created:** [November 11, 2026, 8:36am UTC](https://forums.thehomestack.io/t/microsoft-researchers-show-ai-agents-can-be-backdoored-by-editing-fewer-than-10-neurons/26946 "2026-11-11T08:36:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![robinhood1995](https://forums.thehomestack.io/letter_avatar_proxy/v4/letter/r/48db29/32.png) [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\
**Post date:** [November 11, 2026, 8:36am UTC](https://forums.thehomestack.io/t/microsoft-researchers-show-ai-agents-can-be-backdoored-by-editing-fewer-than-10-neurons/26946/1 "2026-11-11T08:36:01Z")

</div>

An AI model can be given a hidden backdoor by editing fewer than 10 of its rarely used neurons, without retraining the model, Microsoft researchers have shown.

When a chosen trigger appears, the model outputs an attacker’s command, which an agent using that model would run with the agent’s own permissions. The attacker must be able to change the model’s weights.

The team tested the method on

* * *
This is a companion discussion topic for the original entry at [https://thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html](https://thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html)
