The NSA, CISA and FBI released joint Cybersecurity Advisory AA26-251A on 8 September 2026. It says China-based AI companies are conducting industrial-scale knowledge distillation campaigns that extract restricted proprietary functionalities and capabilities of U.S. frontier AI models. Likely with Chinese government awareness, DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI extracted billions of tokens across millions of exchanges/requests from U.S. frontier AI models, including variants of Claude, GPT, Gemini and Grok, since at least late 2024, the advisory says; it adds that DeepSeek has conducted organized campaigns since at least 2024.

This is official AI guidance / strategic warning, not a product CVE. (source: CISA)

Correction (31 Oct 2026): replaced SecurityWeek, which this desk cannot read, with the agencies' advisory as the card's source and moved the card date from 9 to 8 September 2026, the advisory's release date; also removed details that only SecurityWeek gave, the iTnews link, and an update that had no linked source. (source: CISA)