[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-8Vf-YsjKDNGkm-jfj_eOGboCk81MPlvvV3WMCLPZfw":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":114},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"9d451f6a-6e2b-4a5d-8a6e-456dbf7710fc","White House accuses Chinese company of distilling Anthropic’s Fable","white-house-accuses-chinese-company-of-distilling-anthropic-s-fable-7ce1a6","While distillation attacks by foreign governments and companies have real national security implications, questions around who ultimately owns the data in AI systems are fraught. The post White House accuses Chinese company of distilling Anthropic’s Fable appeared first on CyberScoop.","The White House has accused Chinese AI company Moonshot AI of distilling Anthropic's Fable model to develop its own K3 model. A top US technology official stated that Moonshot AI used a sophisticated platform to conduct large-scale distillation against US models and acquired GB300 servers, potentially through Thailand, for training. This accusation highlights concerns over intellectual property theft and national security implications in the AI development race.","White House accuses Chinese company Moonshot AI of distilling Anthropic's AI models.","https:\u002F\u002Fcyberscoop.com\u002Fwhite-house-accuses-moonshot-ai-anthropic-model-distillation\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F07\u002Fkratsios.jpeg","2026-07-22T16:45:37+00:00","2026-07-22T18:00:26.5254+00:00",7,[17,20,23,25,27,30],{"name":18,"type":19},"Moonshot AI","vendor",{"name":21,"type":22},"Fable","product",{"name":24,"type":22},"K3",{"name":26,"type":19},"Anthropic",{"name":28,"type":29},"Chinese company","threat_actor",{"name":31,"type":19},"Alibaba","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":32,"icon":34,"name":35,"slug":36},null,"Nation-state","nation-state",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,26,31],{"controls":58,"vendors":113},[59,84],{"slug":44,"name":60,"problem":61,"products":62},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":80,"product_name":81,"url":82,"description":83},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"slug":85,"name":86,"problem":87,"products":88},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",[],{"slug":115,"title":116,"body":117,"framework_refs":118,"framework_notes":129},"chinese-ai-firm-accused-of-illegally-distilling-us-ai-models-via-large-scale-api-abuse","Chinese AI Firm Accused of Illegally Distilling US AI Models via Large-Scale API Abuse","Moonshot AI allegedly used large-scale model distillation — querying Anthropic's Claude\u002FFable model at massive volume to train its own competing K3 model — representing a sophisticated form of intellectual property theft that exploits API access rather than traditional hacking. This matters because AI model weights and outputs represent enormous R&D investment, and distillation attacks can effectively transfer proprietary capabilities to adversaries without breaching conventional security perimeters. The alleged acquisition of high-end GPU hardware through third-party countries like Thailand also illustrates how supply chain and export control evasion compound the threat. Without robust API usage monitoring and rate-limiting controls, organizations may be unknowingly funding competitors' model development at scale.",[119,120,121,122,123,124,125,126,127,128],"NIST AI RMF: GOVERN 1.1 – Policies for AI risk management","NIST SP 800-53 AC-20 – Use of External Information Systems","NIST SP 800-53 AU-6 – Audit Review, Analysis, and Reporting","CIS Control 3 – Data Protection","CIS Control 8 – Audit Log Management","CIS Control 15 – Service Provider Management","GDPR Article 25 – Data Protection by Design and by Default","EAR (Export Administration Regulations) – Controlled technology transfer provisions","NIST SP 800-161 – Supply Chain Risk Management Practices","ISO\u002FIEC 42001 – AI Management System Standard",{}]