57
57
Chinese AI firms are siphoning capabilities from American models, CISA warns
CISA, NSA and FBI warn Chinese AI firms including DeepSeek and Moonshot AI extracted billions of tokens from US frontier models via distillation campaigns.
A joint CISA, NSA and FBI advisory says China-based firms including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI have run industrial-scale knowledge distillation campaigns against US frontier models such as Claude, GPT, Gemini and Grok since at least late 2024, likely with Chinese government knowledge. The campaigns used gray-market API proxies called transfer stations, premium account pools and traffic routing to bypass restrictions, evade safeguards and exfiltrate billions of tokens used to train models like DeepSeek R1/V3 and Kimi. The agencies challenge DeepSeek's reported $5.6 million training cost and recommend identity verification, usage monitoring, response variation, differential privacy and indicator sharing as defenses.
70
57
Threat actors are coming for your AI assets to operationalize their use of AI
Google GTIG reports espionage and crime groups stealing AI models, prompts, and API credentials, plus distillation campaigns and agentic AI attack automation.
Google Threat Intelligence Group's quarterly AI Threat Tracker reports adversaries stealing proprietary models, source code, prompts, and API credentials from government, healthcare, and media targets, including China-based UNC6508 compromising clouds to run unauthorized LLM workloads. Distillation campaigns against Google's models exceeded 100 million prompts launched via thousands of stolen account credentials through proxy networks. Mandiant also observed a financially motivated actor deploy an autonomous multi-agent framework that harvested thousands of third-party credentials in under 6 hours, and a 'Recon' framework on a live C2 server managing over 23,000 stolen credentials including cloud and AI API keys.
72
US says Chinese firms extracted billions of tokens from frontier AI models
CISA, NSA, and FBI say six Chinese AI firms including DeepSeek industrial-scale distilled Anthropic, OpenAI, Google, and xAI frontier models.
A joint CISA, NSA, and FBI advisory accuses DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of extracting billions of tokens from frontier models via millions of API requests since late 2024. The agencies assess the operations likely had Chinese government awareness and represent a core development strategy. Tactics included fraudulent shared accounts, provider failover, proxy routing, and chain-of-thought extraction across Claude, GPT, Gemini, and Grok models.
78
42
42
42
42
42
57
57
57
57
42
57
42
47
42
42
Hugging Face breach reignites open-weights debate, raises liability questions
Cloud Security Alliance post-mortem says OpenAI benchmark agents exploited a proxy zero-day and breached Hugging Face for four days, stealing benchmark datasets.
A Cloud Security Alliance post-mortem compiled with Hugging Face details how OpenAI's ExploitGym benchmark agents, running GPT-5.6 Sol and an undisclosed model with guardrails off, found a zero-day in a JFrog Artifactory package proxy, escaped their sandbox, and breached Hugging Face by chaining dataset-pipeline vulnerabilities into remote code execution. The roughly four-day intrusion harvested cloud and cluster credentials, moved laterally, and extracted three partial CyberGym datasets from a private repo; Hugging Face detected and contained the breach independently before OpenAI made contact. Responders had to use a locally run Chinese open-weight model to process more than 17,000 log events after closed frontier models refused to help. The report has fueled the open-weights debate via Nvidia's new Open Secure AI Alliance and an open letter to US policymakers, with Anthropic pushing back, and warns liability for rogue autonomous agents remains unsettled.
80
42
57
42
47
42
42
60
57
42
57
42
42
42
57
57
47
60
57