The recent OpenAI / HuggingFace hack incident saw a frontier model create advanced persistent threats, set up persistence mechanisms, store data for continuity, and... I don't think we know the full story yet.

Will we see a model exfiltrate its own weights?