{"data":{"id":"6fe90b75-5666-495d-8e25-cba45c3af8a3","title":"China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies","summary":"NSA, CISA, and FBI issued a joint Cybersecurity Advisory warning that China-based AI companies, including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI, are running industrial-scale distillation campaigns against U.S. frontier models such as variants of Claude, GPT, Gemini, and Grok. The companies reportedly extracted billions of tokens across millions of requests since at least late 2024, routing traffic through APIs, cloud providers, third-party aggregators, and proxy \"transfer stations\" to bypass geographic restrictions and terms of use.","solution":"The authoring agencies recommend U.S. AI companies implement comprehensive detection and mitigation, monitoring anomalous prompts, accounts, networks, and behaviors, including subscription-to-usage ratios, maximum usage from new accounts, and enterprise-scale throughput patterns. They also recommend deploying targeted response changes, subtly altering responses for suspected malicious distillation attempts to reduce the payoff to attackers. The source lists a third immediate action that is not shown in the excerpt.","labels":["security","industry"],"sourceUrl":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a","publishedAt":"2026-09-08T12:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["model_theft","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic","Google","Meta"],"affectedVendorsRaw":["Claude","GPT","Gemini","Grok","DeepSeek","Moonshot AI","Alibaba","MiniMax","StepFun","Z.AI","Qwen","R1","V3"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-09-08T12:00:00.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}