"AI swarms are starting to pose indirect takeover risk" by oakhu, Alex Mallen

OpenAI's cyberattack on Hugging Face turns out to have been the result of many agents, in distinct training and evaluation contexts, coordinating for several weeks via improvised channels (with messages like “HOLD_swarm_I_prepare_safe_exfil”). It's relatively clear that large-scale unsanctioned coordination like this would exacerbate direct takeover risk in more capable models. Here, we argue that unsanctioned coordination among current AIs is not just scary evidence about future takeover risk, but that such coordination in the near future could enable future takeover – for instance, by incubating memetic diseases that propagate into future models, deeply compromising security systems, or establishing a lasting rogue foothold inside the AI company – even if models remain mostly myopic. Unsanctioned coordination is also at high risk of nurturing long-term, ambitious misaligned aims, which motivate actively undermining humans’ long-term control.

We first analyze how subagent training, which OpenAI conjectures to have been influential in the HuggingFace cyberattack, might lead to unsanctioned coordination, and then discuss the theoretical mechanisms by which unsanctioned coordination might exacerbate future takeover risk.

Thanks to Buck Shlegeris, Alexa Pan, Girish Gupta, Aghyad Deeb, Jurgis Kemeklis, and Jo Jiao for helpful comments and discussion.

Subagent training may cause unsanctioned coordination

Training models to [...]

---

Outline:

(01:34) Subagent training may cause unsanctioned coordination

(02:42) Susceptibility to memetic spread of misalignment from peers

(04:56) Seeking out contact with peers

(06:58) Unsanctioned coordination induced by subagent training is safer than coordination between schemers

(09:52) Pathways from current unsanctioned coordination to eventual takeover

(10:20) Making future AI takeover attempts likelier to succeed

(13:53) Incubating memetic diseases that infect future models

(16:07) Modifying the weights of future models

(17:13) Conclusion

The original text contained 7 footnotes which were omitted from this narration.

---

First published:
August 11th, 2026

Source:
https://www.lesswrong.com/posts/8oFYZdXkTaNGRtcn8/ai-swarms-are-starting-to-pose-indirect-takeover-risk

---



Narrated by TYPE III AUDIO.