Microsoft researchers say they can implant a hidden backdoor by reprogramming fewer than 10 rarely used neurons in a large language model, without retraining it. The Lazarus technique needs only inference-level computing and checkpoint write access, and reliable detection requires comparing altered weights with an original copy.