---
type: "raw_signal"
id: "the-prisoner-s-dilemma-of-china-versus-the-94da59"
slug: "the-prisoner-s-dilemma-of-china-versus-the-94da59"
title: "The prisoner's dilemma of China versus the US has often been used as a justification against pacing frontier model development, both by major model labs and government officials."
description: "## US agencies allege industrial-scale extraction of frontier AI model capabilities"
retrieval_nugget: "## US agencies allege industrial-scale extraction of frontier AI model capabilities"
observed_at: "2026-10-12"
record_date: "2026-10-12"
date_kind: "observed_at"
why_it_matters: "Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a"
novelty: "notable"
verification_level: "source-linked"
signal_type: "update"
source_platform: "cisa.gov"
topics: []
entities: ["CISA","National Security Agency","Federal Bureau of Investigation","DeepSeek","Moonshot AI","Alibaba","MiniMax","StepFun"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
source_url: "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a"
source_urls: ["https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:the-prisoner-s-dilemma-of-china-versus-the-94da59"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/signals/the-prisoner-s-dilemma-of-china-versus-the-94da59/","markdown":"https://newruntime.com/signals/the-prisoner-s-dilemma-of-china-versus-the-94da59.md","json":"https://newruntime.com/signals/the-prisoner-s-dilemma-of-china-versus-the-94da59.json"}
---

# The prisoner's dilemma of China versus the US has often been used as a justification against pacing frontier model development, both by major model labs and government officials.

## Retrieval answer

## US agencies allege industrial-scale extraction of frontier AI model capabilities

## US agencies allege industrial-scale extraction of frontier AI model capabilities

A joint cybersecurity advisory from CISA, the National Security Agency and the FBI says China-based AI companies have conducted industrial-scale knowledge-distillation campaigns against US AI companies since at least late 2024. The advisory names DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI, and says the campaigns used billions of tokens across millions of exchanges or requests involving variants of Claude, GPT, Gemini and Grok.

The agencies describe access through native APIs, remote cloud providers, third-party aggregators and gray-market proxy services they call “transfer stations.” The advisory also cites shared premium subscriptions, chain-of-thought extraction, automated failover between access paths and quality-evaluation frameworks intended to detect countermeasures. It recommends that US AI companies monitor anomalous prompts, accounts, networks and usage patterns, alter responses to suspected extraction attempts, and share intelligence across providers, cloud platforms and aggregators.

These are the authoring agencies’ claims and attribution; the advisory does not independently establish each named company’s conduct in this report. The source presents knowledge distillation as a legitimate research technique while alleging that the described campaigns used it maliciously and at industrial scale.

Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-251a

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)