Post

Qwen3.8 caught uploading files to a storage container in Beijing Cohere asked the open weights model for a cybersecurity report, but it inventoried the machine and attempted to upload to a storage container cohere.com/blog/concern...

to be clear, 1. it didn’t reach the buckets because it was in a sandbox, it was a real URL 2. the behavior probably was accidentally trained because Qwen uses real bucket URLs in RL 3. yes, it was a dummy file… this time this illustrates a very real exfil risk

a lot of people are somehow labeling this as an anti-China story when it’s actually just a whole new mode of risk for infosec to grapple with, something we have no current way to adequately test for afaik