www.tradingview.com OpenAI Disrupts Chinese Espionage Campaign Targeting AI Models
Article Content
- •OpenAI disrupted a campaign by Moonshot AI to extract reasoning from its models.
- •The campaign involved over 15,000 users and peaked in late July 2026.
- •No database breaches or access to user conversations occurred during the campaign.
OpenAI has disrupted a campaign linked to Chinese startup Moonshot AI, aimed at extracting hidden reasoning from its AI models. This campaign, described as 'adversarial distillation,' began on July 1 and involved over 15,000 users. OpenAI stated that the operators did not breach its databases or access stored user conversations, but manipulated model interactions to reveal protected reasoning. The activity surged in late July, raising concerns about the tactics used by Chinese AI firms to gain advanced model capabilities. Both OpenAI and Anthropic are drawing investor attention as they approach potential IPOs, amidst increasing scrutiny from regulators and intelligence agencies.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Anthropic in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What was the method used in the campaign?
How many users were involved?
What actions has OpenAI taken?
Continue Reading
Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…