J. Cui, Y. Han, J. Jiao, and J. Zhang, “Persistent Backdoor Attacks Under Continual Fine-Tuning of LLMs”, AAAI, vol. 40, no. 36, pp. 30422-30430, Mar. 2026.