Microsoft researchers showed that editing fewer than ten rarely used neurons can plant a hidden backdoor in an open-weight agent model without retraining it. A backdoored Nemotron-Terminal-8B emitted an attacker's command in at least 98.8% of triggered test sessions and in none of the trigger-free sessions checked.