Backdooring Open-Weight AI Models

Bruce Schneier writes that any open model whose weights have been edited can carry a backdoor, whether through a task-specific fine-tune, a merged adapter, or an abliterated build that removes the model’s ability to refuse. He notes modified weights are widely downloaded without verification of what is inside them.