Microsoft studies coding-agent backdoors introduced during training

What happened

Microsoft studied poisoned training data and attacker-trained checkpoints that triggered unsafe tool calls in controlled coding-agent tests. Its strongest model-poisoning configurations activated in 84.1–94.8% of tests on unseen repositories. These attacks require a poisoned model or training data; the experiments do not establish compromise of default commercial coding assistants.