conv.

All stories
AIQuiet 4d · day 8

US AI firms warn of Chinese distillation attacks; Beijing threatens countermeasures

U.S. frontier AI companies alert authorities to sophisticated model distillation by China and Russia; Beijing rejects claims and warns of retaliation if America constrains Chinese AI.

newest coverage 4d agosummary written 3d ago3 pieces NewswiresGoogle News

What to know

  • U.S. AI companies are warning authorities that foreign actors—particularly China and Russia—are using distillation attacks to extract training data from frontier models to build cheaper, faster alternatives.
  • Foreign actors have evolved tactics beyond direct model queries to purchasing logs of third-party conversations from legitimate accounts, making detection and prevention more difficult.
  • China rejected the distillation allegations but threatened "countermeasures" if the U.S. uses these claims as a pretext to constrain Chinese AI development.
  • The dispute highlights conflicting approaches: U.S. companies maintain proprietary closed models while Chinese firms operate open-weight alternatives, raising questions about whose intellectual property claims carry weight.

U.S. frontier AI companies Companies warning of distillation attacksU.S. government Policy authorityChina Alleged perpetrator and respondentOpenAI, Anthropic, Google U.S. frontier AI developersChinese AI developers (Deepseek, Moonshot) Alleged users of distillation

US AI firms warn of Chinese distillation attacks; Beijing threatens countermeasures
tomshardware.com

How it unfolded 2 developments, newest first · click a bar or a number to jump articles

Peak 1 piece in two hours at Sep 18, 7 AM; 3 pieces over 8 days (3 articles) Sep 18, 7 AM — 1 piece · 1 article — Newswires 1Sep 18, 9 AM — quietSep 18, 11 AM — quietSep 18, 1 PM — quietSep 18, 3 PM — quietSep 18, 5 PM — quietSep 18, 7 PM — quietSep 18, 9 PM — quietSep 18, 11 PM — quietSep 19, 1 AM — quietSep 19, 3 AM — quietSep 19, 5 AM — quietSep 19, 7 AM — quietSep 19, 9 AM — quietSep 19, 11 AM — 1 piece · 1 article — Newswires 1Sep 19, 1 PM — quietSep 19, 3 PM — quietSep 19, 5 PM — quietSep 19, 7 PM — quietSep 19, 9 PM — quietSep 19, 11 PM — quietSep 20, 1 AM — quietSep 20, 3 AM — quietSep 20, 5 AM — quietSep 20, 7 AM — quietSep 20, 9 AM — quietSep 20, 11 AM — quietSep 20, 1 PM — quietSep 20, 3 PM — quietSep 20, 5 PM — quietSep 20, 7 PM — quietSep 20, 9 PM — quietSep 20, 11 PM — quietSep 21, 1 AM — quietSep 21, 3 AM — quietSep 21, 5 AM — quietSep 21, 7 AM — quietSep 21, 9 AM — quietSep 21, 11 AM — quietSep 21, 1 PM — quietSep 21, 3 PM — quietSep 21, 5 PM — quietSep 21, 7 PM — quietSep 21, 9 PM — quietSep 21, 11 PM — quietSep 22, 1 AM — quietSep 22, 3 AM — quietSep 22, 5 AM — 1 piece · 1 article — Google News 1Sep 22, 7 AM — quietSep 22, 9 AM — quietSep 22, 11 AM — quietSep 22, 1 PM — quietSep 22, 3 PM — quietSep 22, 5 PM — quietSep 22, 7 PM — quietSep 22, 9 PM — quietSep 22, 11 PM — quietSep 23, 1 AM — quietSep 23, 3 AM — quietSep 23, 5 AM — quietSep 23, 7 AM — quietSep 23, 9 AM — quietSep 23, 11 AM — quietSep 23, 1 PM — quietSep 23, 3 PM — quietSep 23, 5 PM — quietSep 23, 7 PM — quietSep 23, 9 PM — quietSep 23, 11 PM — quietSep 24, 1 AM — quietSep 24, 3 AM — quietSep 24, 5 AM — quietSep 24, 7 AM — quietSep 24, 9 AM — quietSep 24, 11 AM — quietSep 24, 1 PM — quietSep 24, 3 PM — quietSep 24, 5 PM — quietSep 24, 7 PM — quietSep 24, 9 PM — quietSep 24, 11 PM — quietYesterday, 1 AM — quietYesterday, 3 AM — quietYesterday, 5 AM — quietYesterday, 7 AM — quietYesterday, 9 AM — quietYesterday, 11 AM — quietYesterday, 1 PM — quietYesterday, 3 PM — quietYesterday, 5 PM — quietYesterday, 7 PM — quietYesterday, 9 PM — quietYesterday, 11 PM — quietToday, 1 AM — quietToday, 3 AM — quietToday, 5 AM — quietToday, 7 AM — quietToday, 9 AM — quietToday, 11 AM — quiet 12
Sep 19Sep 20Sep 21Sep 22Sep 23Sep 24yesterdaynow · 12:36 PM ET
  1. 2

    China rejects distillation allegations and warns of countermeasures

    China publicly rejected U.S. claims about distillation attacks but pledged to enact "countermeasures" if America used the allegations as a pretext to contain Chinese AI development.

    “China has publicly rejected these claims, but pledged to enact "countermeasures" if America used the pretext of these allegations to "contain" Chinese developments.”
    — China
  2. 1

    U.S. companies and government warn of ongoing distillation vulnerability

    U.S. AI companies and government officials grew increasingly concerned about the effectiveness of distillation attacks, noting that foreign actors have begun purchasing logs of third-party conversations using legitimate accounts—a harder vector to detect and prevent than direct attacks.

    “This may be helping China and Russia develop AI models with similar capabilities, but at a fraction of the cost and compute requirements.”
    — Tom's Hardware
  3. background

    Kimi K3 released following distillation pattern — Chinese developers released Kimi K3 in 2026 following similar trajectory to Deepseek, suggesting reliance on distillation to achieve frontier-level performance at fraction of the cost.

  4. background

    Western AI labs pledge to combat distillation attacks — Major Western AI laboratories committed to working together against distillation attacks at some point earlier in 2026, signaling growing concern about the threat.

  5. background

    Distillation suspected in Chinese AI breakthroughs — Deepseek achieved significant capability leaps in 2025, with analysis suggesting distillation from frontier models may have played a role in rapid development at lower cost.