[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-inference-speedups-can-smuggle-hidden-backdoors-into-llms":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},9302,"inference-speedups-can-smuggle-hidden-backdoors-into-llms","Inference Speedups Can Smuggle Hidden Backdoors Into LLMs","New research shows LLM inference speedups can trigger hidden backdoors that evade detection, and the best defenses only cut attack success to 2 percent.","Making a large language model run faster can also make it easier to hijack.\n\nResearchers tested seven open-source LLMs across four tasks and three optimization backends, the techniques like quantization and kernel fusion that companies use to cut inference costs. They first built a narrow, input-specific backdoor, then generalized it into what they call the Universal Optimization Backdoor: a model that behaves normally during standard unoptimized execution but activates its hidden behavior the moment optimization is switched on. In their tests, the universal version hit a 100% attack success rate while leaving the model's everyday accuracy untouched, which means it would sail past backdoor checks that only test unoptimized models. The team also built three defenses, and even the best of those still let the attack succeed as much as 2% of the time.\n\nMost backdoor scanners assume a model behaves identically whether optimized or not. This research shows that assumption doesn't hold, and that the speed tricks nearly every production LLM deployment depends on can double as an attack surface. The gap between the model a security team audited and the model actually serving traffic is exactly where this kind of attack hides.\n\nA 100% success rate in testing and a best-case defense that still lets 1 in 50 attempts through is not a solved problem, it's a new line item on the threat model.","[\"ai-security\",\"llm-backdoors\",\"inference-optimization\",\"research\"]","2026-10-01T04:00:00.000Z","2026-10-02T08:03:14.374Z","2026-10-02T08:03:15.937Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"The source paper states the defenses reduce ASR to 'at most 0.02' with no percent sign (so it likely means 2%, not 0.02%) — verify the correct unit before stating 'as low as 0.02%', since misreading the decimal would overstate the defenses' effectiveness by roughly 100x.","resolved","security",[32,33,34,35],"ai-security","llm-backdoors","inference-optimization","research",[37],{"name":38,"url":39},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2605.20641",0,{"sections":42},[43,47,50,54,59,64,68,73,78,82,87,92,97,102],{"name":44,"slug":45,"count":46,"latest_published_at":18},"AI","ai",5688,{"name":48,"slug":30,"count":49,"latest_published_at":18},"Security",820,{"name":51,"slug":52,"count":53,"latest_published_at":18},"Policy","policy",430,{"name":55,"slug":56,"count":57,"latest_published_at":58},"Deals","deals",302,"2026-10-01T09:05:03.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Hardware","hardware",196,"2026-09-30T13:00:00.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":18},"Science","science",165,{"name":69,"slug":70,"count":71,"latest_published_at":72},"Consumer Tech","consumer-tech",149,"2026-09-30T22:57:11.000Z",{"name":74,"slug":75,"count":76,"latest_published_at":77},"Dev Tools","dev-tools",93,"2026-10-01T02:30:48.000Z",{"name":79,"slug":80,"count":76,"latest_published_at":81},"Software","software","2026-09-30T21:41:11.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",84,"2026-09-30T20:39:09.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Gaming","gaming",51,"2026-09-30T16:24:30.000Z",{"name":93,"slug":94,"count":95,"latest_published_at":96},"General","general",50,"2026-09-30T21:37:54.000Z",{"name":98,"slug":99,"count":100,"latest_published_at":101},"Reviews","reviews",31,"2026-09-28T14:31:34.000Z",{"name":103,"slug":104,"count":105,"latest_published_at":106},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]