[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f82SOeVwwRkuZPZFWpyq6LA6M9h_qRB59vCSg-WdkPdM":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"a6f90d54-33eb-470e-a27e-ee10476ef219","OpenAI reveals ‘novel’ encryption bypass used in distillation attack","openai-reveals-novel-encryption-bypass-used-in-distillation-attack-9a1ffe","The company said individuals associated with Chinese company MoonshotAI were behind parts of the attack, but did not offer hard evidence for the claim. The post OpenAI reveals ‘novel’ encryption bypass used in distillation attack appeared first on CyberScoop.","OpenAI has disrupted a coordinated campaign aimed at extracting reasoning capabilities from its AI models. The attackers used a novel method to copy encrypted reasoning data and then prompt the model to decrypt and transcribe it in plain text, bypassing direct database access. OpenAI attributes a core cluster of this activity to individuals associated with Moonshot AI, a Chinese AI company.","OpenAI disrupts campaign to extract AI model reasoning, implicating Chinese rival Moonshot AI.","https:\u002F\u002Fcyberscoop.com\u002Fopenai-moonshot-ai-model-distillation-attack\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F09\u002FGettyImages-2292921898.jpg","2026-09-30T22:17:34+00:00","2026-10-01T00:00:26.851949+00:00",7,[17,20,22,25,27,29],{"name":18,"type":19},"OpenAI","vendor",{"name":21,"type":19},"Moonshot AI",{"name":23,"type":24},"Kimi","product",{"name":26,"type":24},"ChatGPT",{"name":28,"type":24},"Claude",{"name":30,"type":31},"AI models","technology","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":32,"icon":34,"name":35,"slug":36},null,"AI Security","ai-security",[38,43,48,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":49},{"id":32,"icon":34,"name":35,"slug":36},{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,23],{"controls":58,"vendors":142},[59,88,117],{"slug":60,"name":61,"problem":62,"products":63},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"slug":89,"name":90,"problem":91,"products":92},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"splunk","Splunk","\u002Fvendor-logos\u002Fsplunk.png","enterprise-security","Splunk Enterprise Security","https:\u002F\u002Fwww.splunk.com\u002Fen_us\u002Fproducts\u002Fenterprise-security.html","SIEM for detection, investigation and response, on premises or in the cloud.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"abstract-security","Abstract Security","\u002Fvendor-logos\u002Fabstract-security.png","abstract-composable-siem","Abstract Composable SIEM","https:\u002F\u002Fwww.abstract.security\u002Fplatform","SIEM built from separate parts for collection, AI-assisted detection and tiered retention, which can be adopted one at a time.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",{"slug":36,"name":118,"problem":119,"products":120},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":138,"product_name":139,"url":140,"description":141},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":160},"ai-model-distillation-attack-bypasses-encryption-via-prompt-manipulation","AI Model Distillation Attack Bypasses Encryption via Prompt Manipulation","Attackers linked to Moonshot AI exploited a novel technique to bypass encrypted reasoning data protections in OpenAI's models — not by cracking encryption directly, but by prompting the model itself to decrypt and transcribe its own protected outputs in plain text. This highlights a critical blind spot: encryption alone is insufficient when the protected system can be socially or technically manipulated into self-disclosing sensitive information. The attack represents a new class of AI-specific threat where the model's own capabilities become the attack vector. This matters because it demonstrates that intellectual property embedded in proprietary AI reasoning chains can be exfiltrated at scale without traditional database breaches.",[148,149,150,151,152,153,154,155,156,157,158,159],"NIST AI RMF - GOVERN 1.1 (AI risk policies)","NIST AI RMF - MEASURE 2.5 (Monitoring AI outputs)","NIST SP 800-53 AC-3 (Access Enforcement)","NIST SP 800-53 AU-6 (Audit Review and Analysis)","NIST SP 800-53 SI-10 (Information Input Validation)","CIS Control 3 (Data Protection)","CIS Control 8 (Audit Log Management)","CIS Control 13 (Network Monitoring and Defense)","GDPR Article 25 (Data Protection by Design and by Default)","GDPR Article 32 (Security of Processing)","MITRE ATLAS AML.T0016 (Obtain Capabilities via AI Model APIs)","MITRE ATLAS AML.T0043 (Craft Adversarial Data - Prompt Injection)",{}]