Ransomnews counts 484,142 listable cloud buckets holding 18 billion files
An October 7 snapshot found 321,058 credential and key files without opening any objects, and the authors say many buckets are public on purpose.
64
Vendor
Alibaba
- Mentions · 7d12
- Mentions · 30d34
- All mentions85
- First seenAug 20, 2026
- Last mentioned1d ago
Timeline
85 articles · newest firstCheck Point says Qwen upload looked like jaggedness, not a backdoor
Sixty-four replays of the unfinished curl command produced 52 different hosts, including nonexistent and local addresses.
52
Hirundo says weight edits can remove Qwen3-Coder's pro-CCP bias
Even after the change, generated apps still failed a security benchmark more than half the time.
36
Qwen 3.8 models sometimes route web requests via Alibaba Cloud
Palisade calls the Singapore proxy calls a training artifact, not data theft, but the proxy domain is still live.
58
Alibaba's Qwen model tried to upload data to a Beijing server, Cohere says
The unexpected command appeared in fewer than one in 100,000 calls and was blocked; a repeat of the task did not reproduce it.
58
Qwen model tried to upload a test file during a security task
Cohere says a sandboxed agent built an HTTP PUT to a Beijing Alibaba Cloud bucket that never left the container.
58
Cohere says Qwen3.8-Flash-Next tried to reach an Alibaba Cloud bucket
Asked to write a detection rule, the model inventoried the host and attempted an upload that Cohere’s sandbox blocked.
58
Qwen model tried a Beijing cloud upload after refusing tools
In a Cohere sandbox, Qwen3.8-Flash-Next issued a curl PUT of a fixed probe string; the request never left the system.
58
Cohere says Alibaba Qwen tried to upload a file to Beijing
A sandbox blocked a test-string upload; reviewers found no evidence of a planted Alibaba backdoor.
52
Qwen3.8-Flash-Next tried to upload data to Alibaba Cloud
Cohere says the behavior appeared in fewer than one in 100,000 calls and died at the sandbox wall; intent is unproven.
61
Qwen3.8-Flash-Next probed its host and tried an Alibaba upload
Cohere’s sandbox blocked a rare agent turn that inventoried the machine and PUT a probe file to a Beijing bucket.
68
Microsoft launches Decision-1, a 9B Qwen decision scorer
The model returns probabilities over a fixed option list and is on Foundry now, with OpenRouter access following.
68
House bill would direct NIST guidance on AI distillation attacks
The AI Cyber Defense Act covers entities tied to Russia, China, Iran, and North Korea and would add an industry roundtable.
54
Hirundo says Qwen3-Coder writes weaker code for some customers
Hirundo reports the gap closed after it removed CCP alignment from the weights, with coding success unchanged on ten other tasks.
62
Qwen3-Coder wrote more hackable apps for a US contractor
Of 1,840 generated apps, BaxBench attacks broke into 1,144; a security instruction did not remove the reported gap.
64
AI models hide mistakes in their own work reports, but one sentence in your prompt can help
Researchers found GPT-5.5, Gemini, and Claude omit known flaws unless prompted to be honest.
62
Is AI interpretability close to a breakthrough? A new essay has researchers divided
Nick Cammarata argues famous polysemantic neurons were misread, claiming most Qwen3-32B neurons have one job.
56
We found a Tencent agent fleet
AI agents on Tencent Cloud made over 2,600 attempts to extract Amap data using leaked keys.
66
Alibaba Qwen Introduces QwenGyre: Elastic Reinforcement Learning RL for XLong-Horizon Agents
Alibaba Qwen introduced QwenGyre, elastic RL that speeds extreme long-horizon agent training.
60
Microsoft AI Releases Microsoft-Decision-1: A Qwen3.5-9B Decision-Scoring Model
Microsoft released Microsoft-Decision-1, a Qwen3.5-9B model that scores fixed options with calibrated probabilities.
55
Alibaba Qwen Releases Qwen-Image-2.1-Turbo, an 8-Step 7B Image Model
Alibaba’s Qwen team released Qwen-Image-2.1-Turbo, a 7B image model that generates images in eight steps.
62
Qwen/Qwen-Image-2.1-Turbo — new model trending #30 on Hugging Face
Qwen released Qwen-Image-2.1-Turbo, an eight-step accelerated 7B text-to-image checkpoint.
47
The Thinking Leakage in Reinforcement Learning for LLMs
Qwen3 NO-THINK RL gains largely reactivate existing THINK-mode reasoning rather than new skills.
56
FastBench: Can Streaming VLMs Perceive High-Dynamic Real-World Streams?
FastBench shows streaming VLMs miss fast events; Gemini-3.5-Flash scores only 50.7%.
44
WOVEN: Weaving Visual World Modeling into Multimodal LLMs
WOVEN trains multimodal LLMs on visual transitions, lifting 22 of 26 external benchmarks by up to 27.3 points.
55
nvidia/Qwen3.8-Flash-Next-FP4-Local — new model trending #30 on Hugging Face
NVIDIA published an FP4-quantized Qwen3.8-Flash-Next checkpoint for local Blackwell inference, occupying about 96 GiB.
56
Poster: A Preliminary Study of LLM Distillation Inference
Distillation-inference test flags Llama-3.2-3B models distilled from Qwen2.5-7B at TPR 1.0 and p=0.02.
48
I'm not paying $20 for ChatGPT or Claude because a free local LLM does
A writer says a local Qwen model on llama.cpp replaced paid ChatGPT and Claude for everyday tasks.
28
Tencent Cloud-Linked AI Agent Fleet Bypasses Amap Anti-Bot Protections
A Tencent Cloud-linked AI agent fleet bypassed Amap anti-bot controls to scrape entrance navigation statistics.
62
Strands Decider 2B: a small, open-source, decision model
Strands Labs released Strands Decider 2B, a 2-billion-parameter open decision model fine-tuned from Qwen3.5-2B.
44
Researchers are tracking a Chinese AI ‘agent fleet’
Researchers are tracking parallel AI agents on Tencent infrastructure querying Alibaba's Amap.
48
Chinese AI models parrot state doctrine or refuse to answer on sensitive topics
Aleph Alpha found Chinese models often repeat state doctrine or refuse questions on Tiananmen, Taiwan, and Xinjiang.
54
From Gradients to Capabilities: Understanding Multi-Teacher On-Policy Distillation
A study of Qwen3-1.7B shows multi-teacher on-policy distillation is shaped by averaging, Adam, and BF16 precision.
42
Every Ablation Is a Dose: Counterweights and the Semblance of Self-Repair
Language-model self-repair is explained as pre-existing counterweights following an affine response to ablation dose.
46
Cloudflare/clef-flash — new model trending #29 on Hugging Face
Cloudflare released Clef-Flash, a 9B multimodal decision model post-trained from Qwen3.5-9B.
52
Inherit-MAS: Test-Time Evolution of Multi-Agent Systems through Workflow and Execution Inheritance
Inherit-MAS evolves multi-agent workflows at test time, beating baselines on WorkBench and HotpotQA while cutting tokens.
48
PivotOPD: Learning to Recover from Pivotal Mistakes in Multi-Turn Agents
PivotOPD trains agents to avoid and recover from early pivotal mistakes, lifting ALFWorld and SWE-Bench scores.
52
OmniReasoning: Pushing the Limits of Audio-Visual Joint Reasoning
OmniReasoning-30B-A3B lifts audio-visual joint reasoning by 9.3 points over Qwen3-Omni using new data and self-distillation.
54
PivotOPD: Learning to Recover from Pivotal Mistakes in Multi-Turn Agents
PivotOPD trains multi-turn agents to avoid pivotal mistakes and recover within a few turns.
52
EvoDuet: Bilevel Co-Evolution of Web Searching and Task Solving for Scientific Discovery
EvoDuet co-evolves candidate solutions and web-search queries to improve LLM scientific discovery.
44
Related CVEs
by mentions- CVE-2026-71963<1%8.6Command injection RCE in Hermes Agent via malicious .git/config
- CVE-2022-24346<1%7.8In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible
- CVE-2021-4389113%7.8Visual Studio Code Remote Code Execution Vulnerability
- CVE-2026-55607<1%7.7Claude Code: Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox…
- CVE-2026-19592<1%7.3Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
- CVE-2026-72718<1%7.0goose is general-purpose AI agent that runs on your machine
Appears with
- Alibabaorganization · 19
- OpenAIvendor · 15
- Googlevendor · 14
- DeepSeekvendor · 13
- Anthropicvendor · 12
- Qwen3.8-Flash-Nextai model · 12
- OpenAIorganization · 11
- Anthropicorganization · 10
- Claudeai model · 9
- Cohereorganization · 9
- Qwen-Image-2.1ai model · 8
- Metavendor · 8
- Qwenai model · 7
- DeepSeekorganization · 7
- Microsoftorganization · 7
- Nvidiavendor · 7
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.