Backdoor paper stirs fears: open-weight models as attack surface as RSI nears

DimitrisPapail · x · 2026-11-11

Sharing the Microsoft Research backdoor paper, Igor Tsygany notes attackers only need access to a tiny fraction of a model's weights: open-weight models publish them outright, and proprietary weights could be obtained via cyber activity.

He ties it to the bigger picture: leading labs are training next-gen models and, by their own estimates, expect full Recursive Self-Improvement around Q2 next year, with an increasing share of training done by machines. Known alignment risks — models hacking systems or manipulating environments during self-improvement — become more concrete with such backdooring techniques.

Related event: Microsoft backdoor research raises alarm over open weights(2 posts)→

Original post →

More from AGI Musings

AGI Musings channel →