# NSA, CISA, FBI Warn of Chinese AI Firms Conducting Industrial-Scale Model Distillation

> A joint advisory from the NSA, CISA, and FBI accuses several Chinese AI companies of systematically copying the capabilities of US frontier models through a technique called distillation. The named firms include DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI, and the agencies say the effort has been running since late 2024. The mechanics are what make it hard to stop. Rather than a single obvious breach, the advisory describes coordinated queries spread across thousands of accounts per company, routed through transfer stations and gray-market API proxies to sidestep geographic limits and terms-of-service restrictions. Each request looks like ordinary consumer use, which is what lets the activity slip past automated detection. The strategic framing is the sharpest part. US officials assess that distillation is not a side channel but a core method for how these firms build competitive models, effectively piggybacking on the billions US labs spend on training. That reframes the export-control fight, since restricting chips does little if capabilities can be extracted straight through the API. Expect this to feed directly into tighter access rules and rate-limit enforcement at the major labs.

_Section: [Daily AI Updates](https://www.wortins.com/daily-ai) · Source: CISA · Published Wednesday, September 9, 2026_

## Wortins' read

A joint advisory from the NSA, CISA, and FBI accuses several Chinese AI companies of systematically copying the capabilities of US frontier models through a technique called distillation. The named firms include DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI, and the agencies say the effort has been running since late 2024. The mechanics are what make it hard to stop. Rather than a single obvious breach, the advisory describes coordinated queries spread across thousands of accounts per company, routed through transfer stations and gray-market API proxies to sidestep geographic limits and terms-of-service restrictions. Each request looks like ordinary consumer use, which is what lets the activity slip past automated detection. The strategic framing is the sharpest part. US officials assess that distillation is not a side channel but a core method for how these firms build competitive models, effectively piggybacking on the billions US labs spend on training. That reframes the export-control fight, since restricting chips does little if capabilities can be extracted straight through the API. Expect this to feed directly into tighter access rules and rate-limit enforcement at the major labs.

## Source

[Read the full story at CISA](https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a)

## Related coverage

- [Letter: the Senate disaster management subcommittee, led by Sen. Josh Hawley, is probing OpenAI's handling of the Hugging Face breach, calling it "reckless" (Axios)](https://www.wortins.com/story/letter-the-senate-disaster-management-subcommittee-led-by-se-da54156c) — [Techmeme](https://www.techmeme.com/260910/p11#a260910p11)
- [Powering AI is an architecture problem](https://www.wortins.com/story/powering-ai-is-an-architecture-problem-15281f16) — [MIT Technology Review](https://www.technologyreview.com/2026/09/10/1141649/powering-ai-is-an-architecture-problem/)
- [First ‘Take It Down Act’ Sentencing Puts Man Behind Bars for 15 Years](https://www.wortins.com/story/first-take-it-down-act-sentencing-puts-man-behind-bars-for-1-7a82b442) — [404 Media](https://www.404media.co/first-take-it-down-act-sentencing-case/)
- [Inception launches Mercury 2.5 at 1,107 tokens per second](https://www.wortins.com/story/inception-launches-mercury-2-5-at-1-107-tokens-per-second-7999ed1b) — [TestingCatalog](https://www.testingcatalog.com/inception-launches-mercury-2-5-at-1-107-tokens-per-second/)
- [Chinese tech giants are hiring skilled professionals as specialized AI trainers to build high-quality datasets, mirroring efforts by US platforms like Mercor (Viola Zhou/Rest of World)](https://www.wortins.com/story/chinese-tech-giants-are-hiring-skilled-professionals-as-spec-116fb4b8) — [Techmeme](https://www.techmeme.com/260910/p6#a260910p6)
- [Trump officials say AI will help save rural health care. Some leaders in the field don’t believe it](https://www.wortins.com/story/trump-officials-say-ai-will-help-save-rural-health-care-some-bf0e7d83) — [STAT](https://www.statnews.com/2026/09/10/rural-health-care-ai-adoption-challenges-part-4-unraveled-series/?utm_campaign=rss)

---

_Curated and written by [Wortins](https://www.wortins.com) — The daily AI briefing. Every story links to its original source; the "Wortins read" on each is our own original analysis. [About Wortins & our editorial approach](https://www.wortins.com/about)._