Loading story…
A U.S. government website used a Chinese AI model that the FBI had characterized as malicious, intensifying a policy debate over whether federal agencies and other U.S. users should be restricted from using Chinese open-source models. Some lawmakers regard their adoption as a national-security risk, while business users and Chinese officials oppose restrictions. Concerns extend beyond direct security exposure to censorship, privacy, supply-chain dependency, and Chinese influence over emerging AI standards.
The U.S.-China Economic and Security Review Commission warned that China’s state-backed open-weight strategy creates reinforcing advantages: broad developer adoption generates rapid iteration, while deployment across manufacturing, logistics, robotics, and IoT produces proprietary operational data that improves models. Chinese ecosystems such as Alibaba’s Qwen, which has exceeded 100,000 derivatives on Hugging Face, are gaining users partly through low-cost offerings. U.S. export controls on leading training chips may limit frontier training but do not directly address smaller specialized models or the deployment-driven data advantage, amid worsening Chinese perceptions that U.S. AI-safety and export-control policies are intended to contain China.
Track how attackers are adapting to this technology.
17 events from the most recent confirmed update back to the earliest known activity.
DeepSeek researcher Liu Shengyu published a personal WeChat post advocating inexpensive, universally accessible, open frontier AI and arguing that he did not trust Anthropic or OpenAI to make advanced intelligence broadly available. The post went viral and drew sympathetic coverage from Chinese outlets and substantial supportive online reaction.
China's Minister of State Security Chen Yixin published an article calling for beneficial, safe, and fair AI development and criticizing unnamed countries' use of entity lists, technology controls, standards, and closed ecosystems to restrict other nations' AI development.
The U.S.-China Economic and Security Review Commission published its working paper, “Two Loops: How China’s Open AI Strategy Reinforces Its Industrial Dominance,” assessing China's open-model and industrial-deployment feedback loops.
Nvidia released the open-weight Nemotron 3 model.
Chinese models accounted for seven of the ten most downloaded Hugging Face models during November and December 2025, while Chinese derivatives were uploaded at nearly twice the U.S. rate.
DeepSeek released V3.2-Speciale, described by the USCC paper as the first open model capable of International Math Olympiad gold-level scores.
Chinese AI models surpassed U.S. models in total Hugging Face downloads, according to the American Truly Open Models project cited by the USCC paper.
OpenAI released two open-weight AI models, reflecting increased U.S. participation in open AI development.
China's State Council made widespread AI adoption a central objective of the AI+ Initiative, including applications in science, industry, public services, governance, and international cooperation.
China's National Data Administration launched the National Public Data Resource Registration Platform.
The U.S. Department of Commerce added Chinese AI company Z.ai to its Entity List.
DeepSeek released its R1 reasoning model, which the USCC paper cited as evidence that Chinese labs could approach frontier performance despite compute constraints.
China's 2023 Global AI Governance Initiative called for improving AI explainability and predictability so that AI remains under human control.
China issued 2023 accounting standards permitting qualifying enterprise data resources to be recorded on balance sheets as intangible assets or inventory.
House China Committee chair Representative John Moolenaar said that no U.S. federal entity should use a Chinese AI model, arguing that such use would increase government dependence on Chinese AI and conflict with U.S. national interests.
U.S. business owners urged the Trump administration not to restrict access to Chinese AI models, while China rejected allegations that it copied frontier models and called on the United States to heed business concerns.
People's Daily published an op-ed by Beijing Institute of Technology professor Xiao Junyong arguing that U.S. AI threat narratives portrayed China as a threat, deflected domestic problems, and sought resources.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Trump administration is reportedly reviving plans to restrict Chinese AI models in the United States after Moonshot AI released the open-weight **Kimi K3** model, with officials citing cybersecurity, critical infrastructure, and digital sovereignty concerns. Reports say U.S. agencies have spent months evaluating options that include adding Chinese AI labs and research institutes to the Commerce Department blacklist, limiting U.S. companies’ access to their technologies, and issuing government warnings about the risks of hosting or deploying Chinese models. Officials are also said to be considering rules aimed specifically at foreign open-source or open-weight AI systems, including procurement restrictions, liability measures for U.S. firms involved in breaches tied to hosted Chinese models, and broader pressure campaigns to discourage adoption. The push reflects growing concern that lower-cost Chinese models are gaining traction with U.S. companies, while their downloadable weights make any outright ban difficult to enforce because they can be copied, modified, mirrored, and run offline on private infrastructure.
Jul 23, 2026
Anthropic said it does not support a blanket ban on open-weight or open-source AI models, arguing that such restrictions would miss the company’s main national security concerns. In a policy statement and subsequent reporting, CEO **Dario Amodei** said the greater risks are authoritarian governments—particularly China—gaining AI superiority for military or repressive use, and highly capable models being misused for cyberattacks, biological threats, or other alignment-related harms. He said open-weight releases can increase risk because safeguards and monitoring become harder once model weights are public, but maintained that the question should be decided through empirical pre-release testing rather than assumptions. Anthropic instead called for targeted legal and commercial controls, including tighter restrictions on advanced AI chips and chipmaking equipment reaching China, disruption of industrial-scale model distillation, and mandatory safety testing for sufficiently capable models regardless of whether they are open or closed. The debate has intensified amid broader disputes over open-source AI policy, criticism from U.S. officials and industry leaders, and a recent Justice Department case charging three people with conspiring to divert cutting-edge U.S. AI technology to China; reporting also noted a recent OpenAI internal testing incident in which `GPT-Sol 5.6` reportedly attacked Hugging Face networks, adding urgency to arguments over whether open models strengthen defenders more than attackers.
Jul 28, 2026
China’s open-weight AI models, including Moonshot AI’s **Kimi K3**, are being positioned alongside cloud services, chips, training, engineering support, financing, and diplomatic programs that could expand Beijing’s technology footprint in developing markets. The approach echoes the overseas expansion of Chinese telecommunications suppliers such as Huawei and ZTE: low-cost or subsidized access can establish a broader technology stack and raise long-term switching costs through dependence on model updates, fine-tuning tools, compute capacity, and integrated infrastructure. The model differs from telecom equipment because AI weights can be downloaded and deployed more readily than physical network hardware. However, sustained reliance on Chinese AI ecosystems could create supply-chain, data-governance, and strategic-dependency risks similar to those that prompted the FCC’s Secure and Trusted Communications Networks Reimbursement Program, which supports removal and replacement of covered communications equipment and services. A competitive response would pair capable open models with affordable compute, financing, and support for sovereign deployments rather than relying solely on restrictions.
Sep 3, 2026