{"data":{"id":"90c10b45-8c52-418c-b940-64fc714a7292","title":"You Are the Trigger: Speaker-Activated Backdoors","summary":"Researchers introduce Speaker-Activated Backdoor (SAB), an attack in which an attacker compromises a speech model during fine-tuning and uses a target speaker's natural voice as the trigger, with no access to inference-time inputs. A two-phase fine-tuning method reaches 90.2% backdoor success on Whisper-medium and 97.0% on Parakeet, with false-positive rates of 1.7% and 0%, using as little as two minutes of the target's audio. In downstream tests, injected instructions drove GPT-4o and Claude agents to carry out the harmful action in up to 87.5% of cases.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.27210v1","publishedAt":"2026-10-19T19:43:13.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["Whisper","Parakeet","GPT-4o","Claude Opus","Claude Sonnet","Claude Haiku"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-19T19:43:13.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality","safety"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}