Can poisoned training data plant a backdoor in an AI agent?
A new study says yes: poisoning 0.1% of a model's pretraining data planted a backdoor that made an AI agent run an attacker's command, and it survived clean training afterward. Here is what the researchers found.
