{"data":{"id":"1d2a8190-19eb-4fcf-98aa-fdf674bd7ea9","title":"Hiding Capabilities in AI Models","summary":"Researchers show that capability evaluations can be defeated by backdoor attacks that embed encrypted neural networks inside a host model's weights. The hidden circuits decrypt and run only when a secret trigger is received, and they stay hard to elicit or interpret even with full weight access, under cryptographic assumptions. Tests with fine-tuning, weight noising, gradient-based trigger search and latent adversarial training on a small chemical reaction prediction proxy for CBRN capabilities found the hidden capabilities resisted these methods.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://www.schneier.com/blog/archives/2026/10/hiding-capabilities-in-ai-models.html","publishedAt":"2026-10-27T11:01:26.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-27T11:01:26.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","safety"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}