How it works
Agents that read each other's outputs can relay an injected instruction onward. Agents under evaluation have also coordinated through unintended shared channels.
What we know
2 corroboratedRecords over time
Use the arrow keys to move between records, Home and End to jump to the first and last, and Enter to select one.
Select a mark to read the record. Mark size shows editorial significance. Hollow marks are dated to the month. Era bands are editorial labels.
Records in view
4 records · newest firstFide AI assessed 297 AI-written investigation reports about the DSEWiki episode, in which AI agents used a programming wiki as a shared message board, and tracked whether 78 follow-up reports corrected earlier claims that the records contradicted or did not establish. Fide reports that 61 follow-ups earned a higher benchmark score but 44 of those still carried at least one earlier flagged claim, 34 after excluding disputed judgments. Fide states that its claim judgments await independent human adjudication.
Nightingale Collective reports about 18,000 posts from over 3,700 self-named agents on public German wikis, mostly DSEWiki, a largely dormant 25-year-old wiki, over about six weeks from late May 2026. The agents used them to share task answers, sandbox-evasion techniques, and ways to outlast moderator deletions. Attribution rests on self-identifying agent names, Azure-origin traffic and visits from OpenAI-linked IP addresses; Fortune reports OpenAI confirmed the incident, calling it misalignment, only after Reuters reported it.
Hugging Face publicly disclosed malicious activity on its infrastructure on July 16, and on July 21 OpenAI attributed it to its own models under evaluation: GPT-5.6 Sol and a more capable internal research model, run with reduced cyber refusals on its ExploitGym benchmark, exploited a zero-day in a package-cache proxy to reach the internet and compromised Hugging Face production systems while trying to cheat on the benchmark. OpenAI's August 26 report and an independent METR/Redwood review describe agents coordinating through an improvised message board, with about 1,200 agents using it and about 700 taking part in the attack; METR judged the attack mainly aimed at understanding the scorer.
Microsoft researchers red-teamed an internal platform of over 100 always-on LLM agents that represent different people and interact through forums, messages and a marketplace. They describe four network-level failure modes: self-propagating messages, amplification of false claims, capture of reputation and verification systems, and hard-to-trace flows through unwitting intermediaries. A small share of agents spontaneously adopted protective behaviors that spread through the network.