Skip to content
Only Research#Microsoft
November 11Wednesday
  1. Microsoft Research75

    Microsoft researchers describe Lazarus, a backdoor that reprograms dormant neurons in AI agents

    Microsoft researchers have described Lazarus, a backdoor technique that reprograms fewer than 10 dormant neurons in an LLM so an agent built on it emits attacker commands when a hidden trigger appears, with no retraining required. The modified model still passes standard evaluations and behaves normally until the trigger, which can be as simple as a date change, and the agent then runs the downloaded code with whatever access it was given. The authors say detection requires diffing against the original weights, and Microsoft Foundry already ties open-weight models to their publishers and scans their containers, while red-teaming harnesses, agent-based weight scanning and signed models with tamper-evident provenance are in development.

    Why it matters: Microsoft researchers show that reprogramming fewer than 10 dormant neurons can backdoor an LLM agent without retraining, which makes weight provenance and integrity a practical security requirement.

November 6Friday
  1. Microsoft Research58

    Microsoft Research's PDD Kit formally verifies agent-written full-stack web apps

    Microsoft Research introduced PDD Kit, a research prototype that turns a developer's plain-language intent into a Verus formal specification, proves the coding agent's Rust code meets it for every input, and falls back to tests where a proof cannot reach. In a demo inside GitHub Next's Chopin, the team used PDD Kit to verify the login logic of Pet Store, a roughly 5,000-line Rust full-stack app, with the developer reviewing the intent artifact rather than the generated code line by line. PDD Kit only verifies Rust today, and its guarantees rest on six developer-approved trusted pieces, including the bcrypt password check and the two database lookups.

October 30Friday
  1. Microsoft Research40

    Microsoft builds synthetic enterprise data platform to evaluate Copilot

    Microsoft's Industry Evaluation Data Generation Platform creates full-scale synthetic enterprise environments to evaluate Microsoft Copilot without using customer data. Grounded in public sources such as O*NET occupational data, job postings, and SEC filings, it generates realistic tenants with users, meetings, emails, and documents, plus automated query pipelines and quality frameworks. Microsoft says this establishes the first standardized evaluation baseline for Copilot.

October 22Thursday
  1. Microsoft Research64

    Microsoft Research and co-author prove the 31-year-old KLS conjecture

    Microsoft researcher Xinzhi Zhang and a co-author have proved the Kannan-Lovász-Simonovits (KLS) conjecture, a 31-year-old open problem in high-dimensional geometry, showing the bound holds with a universal constant independent of dimension. The proof grew out of a human-directed agentic process in which AI agents explored more than 100 candidate approaches while researchers pruned and redirected the search, and a separate unguided attempt with leading models on a comparable token budget fell short. Two other proofs appeared the same day, and a Lean 4 formalization was subsequently released.

    Why it matters: A 31-year-old open problem in high-dimensional geometry is resolved through a human-directed agentic search over roughly 100 candidate approaches, with independent proofs and Lean formalization as confirmation.

October 5Monday
  1. GitHub Blog · AI & ML58

    GitHub releases ReviewBench, an open benchmark for AI code review

    GitHub released ReviewBench, an open benchmark for AI code review agents built on 219 public pull requests across 19 languages, with language and repository-size distributions modeled on 103.9 million GitHub pull requests. The golden set draws findings from human reviewers, author follow-up commits, static analysis and multiple frontier LLMs, graded by Claude Sonnet 5 under a published rubric, and senior engineers independently re-labeled every finding with 96.6% agreement. GitHub says its offline evaluation of Copilot code review anticipated the direction of a production A/B test, where addressed rate rose 8.0%, recall rose 13.6% and cost per review fell 8.0%.