Demonstrates undetectable model backdoors, a serious risk for open-weight deployment.
A writeup describes researchers hiding an encrypted capability inside an AI model that survives fine-tuning, raising concerns about undetectable backdoors in local LLMs.