AI models inch closer to hacking on their own