{
  "type": "tweet",
  "id": "2116185590953922771",
  "url": "https://x.com/dair_ai/status/2116185590953922771",
  "twitterUrl": "https://twitter.com/dair_ai/status/2116185590953922771",
  "text": "RT @omarsar0: Interesting paper from Anthropic and colleagues on agent security.\n\n(bookmark it)\n\nPoisoning 0.1% of the pretraining data pla…",
  "source": "",
  "retweetCount": 2,
  "replyCount": 27,
  "likeCount": 33,
  "quoteCount": 2,
  "viewCount": 2978,
  "createdAt": "Fri Oct 30 15:08:56 +0000 2026",
  "lang": "en",
  "bookmarkCount": 31,
  "isReply": false,
  "inReplyToId": null,
  "conversationId": "2116185590953922771",
  "displayTextRange": [
    0,
    140
  ],
  "inReplyToUserId": null,
  "inReplyToUsername": null,
  "author": {
    "type": "user",
    "userName": "dair_ai",
    "url": "https://x.com/dair_ai",
    "twitterUrl": "https://twitter.com/dair_ai",
    "id": "889050642903293953",
    "name": "DAIR.AI",
    "isVerified": false,
    "isBlueVerified": true,
    "verifiedType": null,
    "profilePicture": "https://pbs.twimg.com/profile_images/1643277398522187778/31dedbLo_normal.jpg",
    "coverPicture": "https://pbs.twimg.com/profile_banners/889050642903293953/1773242460",
    "description": "",
    "location": "",
    "followers": 136075,
    "following": 1,
    "status": "",
    "canDm": true,
    "canMediaTag": true,
    "createdAt": "Sun Jul 23 09:12:45 +0000 2017",
    "entities": {
      "description": {
        "urls": []
      },
      "url": {}
    },
    "fastFollowersCount": 0,
    "favouritesCount": 5735,
    "hasCustomTimelines": true,
    "isTranslator": false,
    "mediaCount": 463,
    "statusesCount": 4074,
    "withheldInCountries": [],
    "affiliatesHighlightedLabel": {},
    "possiblySensitive": false,
    "pinnedTweetIds": [
      "2115808882434158851"
    ],
    "profile_bio": {
      "description": "Democratizing AI research, education, and technologies. Learn about AI Agents for FREE at https://t.co/HHXg8rryu4",
      "entities": {
        "description": {
          "urls": [
            {
              "display_url": "academy.dair.ai/courses/elemen…",
              "expanded_url": "https://academy.dair.ai/courses/elements-of-ai-agents",
              "indices": [
                90,
                113
              ],
              "url": "https://t.co/HHXg8rryu4"
            }
          ]
        },
        "url": {
          "urls": [
            {
              "display_url": "dair.ai",
              "expanded_url": "https://www.dair.ai/",
              "indices": [
                0,
                23
              ],
              "url": "https://t.co/lkqPZtMU5s"
            }
          ]
        }
      }
    },
    "isAutomated": false,
    "automatedBy": null,
    "protected": false
  },
  "extendedEntities": {},
  "card": null,
  "place": {},
  "entities": {
    "user_mentions": [
      {
        "id_str": "3448284313",
        "indices": [
          3,
          12
        ],
        "name": "elvis",
        "screen_name": "omarsar0"
      }
    ]
  },
  "quoted_tweet": null,
  "retweeted_tweet": {
    "type": "tweet",
    "id": "2116183621157736540",
    "url": "https://x.com/omarsar0/status/2116183621157736540",
    "twitterUrl": "https://twitter.com/omarsar0/status/2116183621157736540",
    "text": "Interesting paper from Anthropic and colleagues on agent security.\n\n(bookmark it)\n\nPoisoning 0.1% of the pretraining data planted a remote code execution backdoor in a CLI agent.\n\nOn a 4B model, the attack succeeded on roughly 92% of triggered prompts.\n\nThey pretrained Qwen3 models from scratch at 0.6B, 1.7B, and 4B, then post-trained each one into an agent with a clean pipeline.\n\nThe backdoor survived SFT, DPO, and RL for tool use. On clean inputs, the agent behaved normally.\n\nThe trigger can be an ordinary file path in the user's own request. Success rose with model size.\n\nAt a 0.0005% poison rate, about 2,500 documents in a 100B-token corpus, the trigger still fired on 1.4% of prompts in a single-seed run.\n\nThe poison states its rule in plain text, which makes it harder to filter out of training data.\n\nhttps://t.co/8Bx42BUkvw\n\nChat with Paper: https://t.co/hRpypaBxIE",
    "source": "",
    "retweetCount": 2,
    "replyCount": 27,
    "likeCount": 33,
    "quoteCount": 2,
    "viewCount": 2978,
    "createdAt": "Fri Oct 30 15:01:06 +0000 2026",
    "lang": "en",
    "bookmarkCount": 31,
    "isReply": false,
    "inReplyToId": null,
    "conversationId": "2116183621157736540",
    "displayTextRange": [
      0,
      275
    ],
    "inReplyToUserId": null,
    "inReplyToUsername": null,
    "author": {
      "type": "user",
      "userName": "omarsar0",
      "url": "https://x.com/omarsar0",
      "twitterUrl": "https://twitter.com/omarsar0",
      "id": "3448284313",
      "name": "elvis",
      "isVerified": false,
      "isBlueVerified": true,
      "verifiedType": null,
      "profilePicture": "https://pbs.twimg.com/profile_images/939313677647282181/vZjFWtAn_normal.jpg",
      "coverPicture": "https://pbs.twimg.com/profile_banners/3448284313/1565974901",
      "description": "",
      "location": "DAIR.AI Academy",
      "followers": 326887,
      "following": 1357,
      "status": "",
      "canDm": true,
      "canMediaTag": true,
      "createdAt": "Fri Sep 04 12:59:26 +0000 2015",
      "entities": {
        "description": {
          "urls": []
        },
        "url": {}
      },
      "fastFollowersCount": 0,
      "favouritesCount": 42129,
      "hasCustomTimelines": true,
      "isTranslator": true,
      "mediaCount": 5220,
      "statusesCount": 21054,
      "withheldInCountries": [],
      "affiliatesHighlightedLabel": {},
      "possiblySensitive": false,
      "pinnedTweetIds": [
        "2115980498975551690"
      ],
      "profile_bio": {
        "description": "Building the frontier @dair_ai • Prev: Meta AI | Galactica LLM | Papers with Code | Elastic | PhD",
        "entities": {
          "description": {
            "user_mentions": [
              {
                "id_str": "",
                "indices": [
                  22,
                  30
                ],
                "name": "",
                "screen_name": "dair_ai"
              }
            ]
          },
          "url": {
            "urls": [
              {
                "display_url": "academy.dair.ai",
                "expanded_url": "https://www.academy.dair.ai/",
                "indices": [
                  0,
                  23
                ],
                "url": "https://t.co/R5bOTNbyJW"
              }
            ]
          }
        }
      },
      "isAutomated": false,
      "automatedBy": null,
      "protected": false
    },
    "extendedEntities": {
      "media": [
        {
          "display_url": "pic.x.com/OhjHnnbPMI",
          "expanded_url": "https://x.com/omarsar0/status/2116183621157736540/photo/1",
          "ext_master_playlist_only": [],
          "ext_media_availability": {
            "status": "Available"
          },
          "ext_playlists": [],
          "features": {
            "large": {
              "faces": []
            },
            "orig": {
              "faces": []
            }
          },
          "id_str": "2116183617580019712",
          "indices": [
            276,
            299
          ],
          "media_key": "3_2116183617580019712",
          "media_results": {
            "id": "QXBpTWVkaWFSZXN1bHRzOgwAAQoAAR1eMcnFW7AACgACHV4xypqbUFwAAA==",
            "result": {
              "__typename": "ApiMedia",
              "id": "QXBpTWVkaWE6DAABCgABHV4xycVbsAAKAAIdXjHKmptQXAAA",
              "media_key": "3_2116183617580019712"
            }
          },
          "media_url_https": "https://pbs.twimg.com/media/HV4xycVbsAAUgO9.jpg",
          "original_info": {
            "focus_rects": [
              {
                "h": 828,
                "w": 1478,
                "x": 0,
                "y": 0
              },
              {
                "h": 1478,
                "w": 1478,
                "x": 0,
                "y": 0
              },
              {
                "h": 1685,
                "w": 1478,
                "x": 0,
                "y": 0
              },
              {
                "h": 1876,
                "w": 938,
                "x": 0,
                "y": 0
              },
              {
                "h": 1876,
                "w": 1478,
                "x": 0,
                "y": 0
              }
            ],
            "height": 1876,
            "width": 1478
          },
          "sizes": {
            "large": {
              "h": 1876,
              "w": 1478
            }
          },
          "type": "photo",
          "url": "https://t.co/OhjHnnbPMI"
        }
      ]
    },
    "card": null,
    "place": {},
    "entities": {
      "hashtags": [],
      "symbols": [],
      "urls": [
        {
          "display_url": "arxiv.org/abs/2610.37741",
          "expanded_url": "https://arxiv.org/abs/2610.37741",
          "indices": [
            817,
            840
          ],
          "url": "https://t.co/8Bx42BUkvw"
        },
        {
          "display_url": "academy.dair.ai/papers/agentic…",
          "expanded_url": "https://academy.dair.ai/papers/agentic-backdoors-via-pretraining-poisoning-2610.37741",
          "indices": [
            859,
            882
          ],
          "url": "https://t.co/hRpypaBxIE"
        }
      ],
      "user_mentions": []
    },
    "quoted_tweet": null,
    "retweeted_tweet": null,
    "isLimitedReply": false,
    "communityInfo": null,
    "article": null
  },
  "isLimitedReply": false,
  "communityInfo": null,
  "article": null
}