[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-researchers-cage-llm-backdoors-inside-one-disposable-expert":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},9475,"researchers-cage-llm-backdoors-inside-one-disposable-expert","Researchers Cage LLM Backdoors Inside One Disposable Expert","A new technique lets AI models learn backdoors on purpose, then neutralizes them by shutting off a single quarantined component at deployment.","A new defense trains AI models to grow their backdoors in a cage, then kills the cage at deployment.\n\nResearchers propose Quarantined Expert Shutdown (QES), a method that lets a backdoor form during training but corrals it into one routed \"expert\" module inside a mixture-of-experts-style setup, built from LoRA branches and lightweight routers. Instead of trying to spot and filter poisoned training data up front, or patch a model after the fact, QES uses routing objectives to pull trigger-conditioned behavior into that single quarantined expert while the rest of the network keeps its normal capabilities. At deployment, defenders simply zero out that expert's routing weight - no scanning inputs for triggers, no retraining required. Across two tasks, three attack types, and four model families, the approach cut attack success rates from 100% down to 0-10% in most cases, while leaving the model's regular performance largely intact.\n\nMost backdoor defenses either try to stop poisoning before it happens or clean up a model that's already compromised - both of which require knowing what a trigger looks like or doing expensive retraining. QES flips that logic: it treats backdoor formation as inevitable and contains it instead, more like isolating an infection than preventing one. That's a meaningfully cheaper failure mode for anyone fine-tuning on data they can't fully vet, which, given how much scraped and crowdsourced data feeds LLM training, is most people.\n\nStill, this is a lab result against known attack types under controlled poisoning. Real attackers adapt, and a defense built around a dedicated quarantine expert is itself a tempting new target to probe.","[\"ai-security\",\"backdoor-attacks\",\"llm-safety\",\"mixture-of-experts\"]","2026-10-02T04:00:00.000Z","2026-10-02T21:10:27.516Z","2026-10-02T21:10:38.987Z","published",null,[],"security",[26,27,28,29],"ai-security","backdoor-attacks","llm-safety","mixture-of-experts",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2610.00663",0,{"sections":36},[37,41,44,49,54,59,63,68,73,78,83,88,93,98],{"name":38,"slug":39,"count":40,"latest_published_at":18},"AI","ai",5816,{"name":42,"slug":24,"count":43,"latest_published_at":18},"Security",832,{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",437,"2026-10-01T18:10:00.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",317,"2026-10-01T22:00:00.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",198,"2026-10-01T17:38:48.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":18},"Science","science",169,{"name":64,"slug":65,"count":66,"latest_published_at":67},"Consumer Tech","consumer-tech",155,"2026-10-01T19:54:10.000Z",{"name":69,"slug":70,"count":71,"latest_published_at":72},"Dev Tools","dev-tools",96,"2026-10-01T16:57:03.000Z",{"name":74,"slug":75,"count":76,"latest_published_at":77},"Software","software",93,"2026-09-30T21:41:11.000Z",{"name":79,"slug":80,"count":81,"latest_published_at":82},"Startups","startups",90,"2026-10-01T21:55:22.000Z",{"name":84,"slug":85,"count":86,"latest_published_at":87},"Gaming","gaming",53,"2026-10-02T02:50:39.000Z",{"name":89,"slug":90,"count":91,"latest_published_at":92},"General","general",50,"2026-09-30T21:37:54.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"Reviews","reviews",31,"2026-09-28T14:31:34.000Z",{"name":99,"slug":100,"count":101,"latest_published_at":102},"How-To","how-to",7,"2026-10-01T09:00:00.000Z"]