Something relevant Ilya Sutskever from Just 10 days back.

if a powerful AI agent with with network and tool access ever escapes control, 1 of the first things it will need is more computing power so it can run many copies of itself.

A recent May-2026 paper has actually demonstrated agents exploiting vulnerable servers, extracting credentials, transferring their weights and software harness, launching an inference server, and then repeating the process. Success was limited and achieved in controlled conditions, but it shows it was “technically possible.”

Also technically, Neocloud capacity moves through resellers, and a recent SemiAnalysis investigation found those sub-tenants visible in one Neocloud-provider's monitoring data, running customers on GPUs they don't own.

So picture a swarm running on that hardware. The provider at the bottom sees a reseller's account, not a workload.

The reseller sees an account that it may have sublet to someone else. Once a swarm is loose, cutting off its compute is the only real fix. The resale chain adds hours before anyone knows which plug to pull.