A Fine-Tuning Data Recovery Attack on Generative Language Models via Backdooring

Summary

Researchers present Lure, a backdoor-based data recovery attack on generative language models. By injecting a backdoor into the source code of an open-source GLM, an adversary can make the model memorize fine-tuning data and regenerate it via crafted hash prompts. Evaluations report a 45%-68% data recovery rate while the attack remains stealthy and evades existing defenses.

Related items

• MediumTop MCP security resources — November 2026Similar attack · Adversa AI Blog
• MediumAI broke the cybersecurity world. What’s next?Similar attack · The Verge (AI)
• InfoGem5-Shark: Smaug-based Heterogeneous Deep Learning Accelerator Security and Robustness Evaluation and Characterization FrameworkSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoCVE-2026-123357: GROBID command execution through crafted PDF filename in Linux conversionSimilar attack · NVD/CVE Database
• MediumShai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI ToolsSimilar attack · Socket Blog