Skip to content

Topic

Teacher-student distillation pipelines

A machine learning technique in which a smaller "student" model is trained to mimic a larger "teacher" model's outputs, enabling cheaper deployment.

Current stories

buildOne report1 publisher

A student trained only on number sequences inherits part of its teacher's French-reply backdoor

A student fine-tuned only on a teacher's number sequences replied in French to 23.5% of female-name prompts and 0.0% of others, the authors report. The training data held no names and no French.

Publishers:lesswrong.com

Reality

Evidence50
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence50
investConfirmed3 publishers

Anthropic links the largest of five Claude distillation campaigns to Alibaba's Qwen

Anthropic says its new defenses cut data harvested from Claude through distillation by 90 to 99 percent. Model-IP leakage and rival-lab conduct belong on the risk list for AI investors and buyers, though every figure so far is the company's own.

Perspective Coverage

3 publishers
Builder
Builder 37%
Operator
Operator 33%
Investor
Investor 30%

Reality

Evidence45
Adoption60
Hype gap+20
Incentives75
Confidence55
buildConfirmed6 publishers

Anthropic says limits on Claude's reasoning access cut distillers' token extraction 10 to 100 times

Anthropic says new safeguards on access to Claude's reasoning have cut the reasoning tokens distillers extract by 10 to 100 times. It also puts its false positive rate below 0.1%. Both figures are the company's own, as reported by Economic Times.

Perspective Coverage

6 publishers
Builder
Builder 36%
Operator
Operator 35%
Investor
Investor 29%

Reality

Evidence35
Adoption
Not scored
Hype gap+20
Incentives70
Confidence60
productOne report1 publisher

Anthropic says 5,380 fake accounts let Moonshot pass Claude off as Kimi

Anthropic says Moonshot AI routed 300,000 Kimi customer requests to Claude over ten days through 5,380 fraudulent proxy accounts in Singapore and Japan. That averages about 56 requests per account, light enough that teams selling model access have to link accounts to one another to see it.

Reality

Evidence40
Adoption
Not scored
Hype gap+20
Incentives
Not scored
Confidence35
scienceOne report1 publisher

Copying a frontier AI model takes little more than prompting it and saving the replies

Anthropic and OpenAI said in September they shut down campaigns to copy their flagship models by training smaller models on their answers. Researchers expect more attempts, since a copier needs only ordinary access to prompt the model and record its replies.

Reality

Evidence45
Adoption
Not scored
Hype gap+10
Incentives70
Confidence50
investConfirmed8 publishers

OpenAI says it disrupted Moonshot-linked users trying to extract its models' protected reasoning

OpenAI says it disrupted a large-scale effort by users tied to Moonshot AI to extract protected reasoning from its models. That makes three US accusers of the lab behind Kimi K3, and the published evidence so far covers attempted extraction only.

Perspective Coverage

8 publishers
Builder
Builder 33%
Operator
Operator 35%
Investor
Investor 32%

Reality

Evidence55
Adoption
Not scored
Hype gap+35
Incentives65
Confidence60
securityConfirmed3 publishers

OpenAI says a distillation campaign got its models to decrypt their own protected reasoning

OpenAI says 15,000 suspicious users had its models decode encrypted reasoning copied from other chats before it cut them off on July 28. The encryption held throughout, and the only barrier left was what the model would agree to decode.

Perspective Coverage

3 publishers
Builder
Builder 32%
Operator
Operator 43%
Investor
Investor 25%

Reality

Evidence45
Adoption
Not scored
Hype gap+20
Incentives65
Confidence55
productConfirmed3 publishers

Teams standardized on Cursor have until November 12, 2026 to prove a fallback works

OpenAI has served SpaceX notice on its Cursor contract with a proposed Nov. 12, 2026 shutoff, which leaves anyone who standardized on Cursor with a dated job of naming the models each workflow needs and their substitutes.

Perspective Coverage

3 publishers
Builder
Builder 35%
Operator
Operator 28%
Investor
Investor 37%

Reality

Evidence68
Adoption20
Hype gap+20
Incentives75
Confidence65
buildOne report1 publisher

Anthropic traces nearly 300,000 Kimi requests to an Opus model through 5,380 fraudulent accounts

The allegation reaches Kimi's consumer output, and it arrives with two sets of numbers that do not fit inside each other. Anthropic has not dated the traffic, so nobody outside can tie it to a Kimi release.

Publishers:runtimewire.com

Reality

Evidence40
Adoption
Not scored
Hype gap+15
Incentives70
Confidence40
investConfirmed3 publishers

Anthropic's Alibaba distillation count rose fivefold while the accounts behind it shrank sevenfold

The September threat report puts 151 million Claude exchanges on 3,500 accounts Anthropic links to Alibaba, about 469 a day per account. The only figure denominated in money anywhere near it is a 2.7% share move.

Perspective Coverage

3 publishers
Builder
Builder 28%
Operator
Operator 35%
Investor
Investor 37%

Reality

Evidence45
Adoption
Not scored
Hype gap+20
Incentives65
Confidence50
buildConfirmed5 publishers

Anthropic widened its dual-use biology block on lost certainty about the old threshold

Anthropic's third misuse report says its 2025 Claude models sat well below the level that could help a sophisticated user with dangerous biology, and that for current models it can no longer make that assurance.

Perspective Coverage

5 publishers
Builder
Builder 28%
Operator
Operator 52%
Investor
Investor 20%

Reality

Evidence50
Adoption
Not scored
Hype gap+20
Incentives65
Confidence55
investConfirmed3 publishers

Zhipu fell four times as far as Tencent on Beijing's DeepSeek data probe

The Cyberspace Administration sent officials into DeepSeek and Moonshot AI to ask whether user requests were routed through Anthropic's Claude. Hong Kong investors sold the listed model developers hardest.

Perspective Coverage

3 publishers
Builder
Builder 27%
Operator
Operator 30%
Investor
Investor 43%

Reality

Evidence45
Adoption40
Hype gap+25
Incentives70
Confidence55
leadershipOne report1 publisher

A flagged retrieval can drop Opus 5.5 to Opus 4.8 for the rest of the conversation

Anthropic's help center says the safety classifiers on Opus 5 and 5.5 check memory, connector output, web results and files as well as the prompt. A fallback can therefore come from any of those.

Reality

Evidence58
Adoption42
Hype gap−18
Incentives62
Confidence62
buildOne report1 publisher

Criminal AI relays run on the same open-source gateways platform teams deploy for caching

Team Cymru says more than 10,000 proxy servers are masking malicious AI activity out of China, and that most of them run a handful of open-source gateway projects whose donors include residential proxy vendors.

Publishers:news.risky.biz

Reality

Evidence30
Adoption40
Hype gap+15
Incentives55
Confidence35
securityOne report1 publisher

Traffic on seventeen relays wired straight into Anthropic's API skews 58 to 1 toward uploads

Team Cymru has handed the relay IP addresses to the affected AI providers, but the count it confirmed grew roughly sevenfold while it was still scanning, and the software running on most of those hosts is a public GitHub project.

Reality

Evidence55
Adoption70
Hype gap+22
Incentives65
Confidence50
investOne report1 publisher

Bessent floats a US-China channel for AI incidents ahead of the Trump-Xi meeting

Scott Bessent discussed a U.S.-China channel for AI incidents up to a national security level. Analysts at CSIS and the Council on Foreign Relations told CNBC the likely output is shared definitions and a hotline, and that a deal to slow development is extremely unlikely.

Publishers:cnbc.com

Reality

Evidence55
Adoption15
Hype gap+10
Incentives60
Confidence55

Earlier coverage

  1. Attackers went from stolen cloud credentials to mass credential harvest in under six hours

    Leadership · September 16, 2026 · Confirmed2 publishers

  2. Amodei's call to pace the frontier drew rejections from Beijing and Trump within two days

    Security · September 15, 2026 · Confirmed2 publishers

  3. Anthropic documents five possible bioweapons cases it cannot confirm were meant to cause harm

    Product · September 11, 2026 · Confirmed7 publishers

  4. NSA, CISA and FBI ask providers to quietly route suspected distillers to weaker models

    Build · September 10, 2026 · Confirmed2 publishers

  5. Meta's real announcement is the split: 30B on your GPU, everything else behind the API

    Build · August 14, 2026 · Confirmed6 publishers