[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSQbpPUnLOzCc4_iwjd6pJI9dO-_wUXuJo6_oBpE9k28":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":93},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"c5f1e478-ee83-48e9-9345-2337178e7363","US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities","us-agencies-warn-china-is-systematically-extracting-frontier-ai-capabilities-755410","Distillation is an ‘attack’ against an AI model designed to capture outputs, understand reasoning processes, and subsequently train a different model. The post US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities appeared first on SecurityWeek.","US intelligence agencies (NSA, CISA, FBI) have issued a warning that Chinese AI companies are systematically using a technique called 'distillation' to extract capabilities from US frontier AI models. This process, likely with government awareness, involves training new models on data and reasoning processes from US models like Claude, GPT, Gemini, and Grok, posing a strategic economic threat to US technological leadership.","US agencies warn Chinese AI firms are systematically stealing US frontier AI capabilities.","https:\u002F\u002Fwww.securityweek.com\u002Fus-agencies-warn-china-is-systematically-extracting-frontier-ai-capabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F09\u002FNSA-Cyber-AI.jpg","2026-09-09T12:32:13+00:00","2026-09-09T14:00:06.899149+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"China","threat_actor",{"name":21,"type":22},"NSA","vendor",{"name":24,"type":22},"CISA",{"name":26,"type":22},"FBI",{"name":28,"type":22},"DeepSeek",{"name":30,"type":22},"Moonshot AI","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":31,"icon":33,"name":34,"slug":35},null,"Nation-state","nation-state",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,26],{"controls":57,"vendors":86},[58],{"slug":53,"name":59,"problem":60,"products":61},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",[87],{"slug":88,"name":89,"logo_path":90,"roles":91},"google","Google","\u002Fvendor-logos\u002Fgoogle.png",[92],"affected",{"slug":94,"title":95,"body":96,"framework_refs":97,"framework_notes":111},"china-systematically-extracting-us-frontier-ai-capabilities-via-model-distillation","China Systematically Extracting US Frontier AI Capabilities via Model Distillation","Chinese AI companies are leveraging a technique called 'model distillation' to systematically replicate the capabilities of leading US AI models (Claude, GPT, Gemini, Grok) by training on their outputs and reasoning chains, likely with Chinese government backing. This constitutes a form of intellectual property theft at scale, bypassing the need to develop frontier AI from scratch and eroding the US strategic and economic advantage in AI development. The threat is particularly insidious because distillation exploits publicly accessible API outputs rather than requiring direct system compromise. Without robust usage controls and monitoring, AI providers are inadvertently funding and accelerating the capabilities of geopolitical adversaries. This matters because AI leadership is increasingly tied to national security, economic competitiveness, and military advantage.",[98,99,100,101,102,103,104,105,106,107,108,109,110],"NIST AI RMF - GOVERN 1.1 (AI risk policies and accountability)","NIST AI RMF - PROTECT 2.2 (Access and use restrictions for AI systems)","NIST SP 800-53 AC-17 (Remote Access Controls)","NIST SP 800-53 AC-20 (Use of External Systems)","NIST SP 800-53 SI-7 (Software, Firmware, and Information Integrity)","CIS Control 3 - Data Protection","CIS Control 6 - Access Control Management","CIS Control 8 - Audit Log Management","EAR (Export Administration Regulations) - AI\u002FML technology classification","Executive Order 14110 - Safe, Secure, and Trustworthy AI (Section 4 on AI safety standards)","GDPR Article 25 - Data Protection by Design (for EU-facing AI APIs)","ITAR - International Traffic in Arms Regulations (dual-use AI technology)","MITRE ATLAS - AML.T0005 (Model Inversion Attack), AML.T0016 (Obtain Capabilities via AI Model)",{}]