NSA and FBI Warn: "Industrial-Scale" AI Distillation Evades Standard API Defenses

The NSA, FBI and Cybersecurity and Infrastructure Security Agency said on September 8 that six China-based AI companies have conducted “industrial-scale” distillation campaigns against U.S. frontier-model providers. The advisory describes systematic extraction of model capabilities for use in training competing systems and says the activity can be distributed across providers and infrastructure routes.

The agencies acknowledge that knowledge distillation is legitimate machine-learning work. Their allegation concerns scale, coordination and circumvention of access controls. It is a cybersecurity assessment, not a court judgment that the named companies committed intellectual-property theft.

The operational finding is the topology. If extraction is split among native APIs, cloud platforms, aggregators, proxy services and many identities, a rate limit or account ban removes one node while leaving the route intact. A provider needs signals that can be matched across intermediaries, not merely a better blocklist at one endpoint.

The same distribution layer serves attackers and paying customers

NSA and its partners recommend information sharing among model providers, cloud companies, API aggregators and infrastructure operators, along with anomalous-request detection and countermeasures. The same controls can catch legitimate high-volume or geographically distributed enterprise traffic, creating review and false-positive costs.

The advisory imposes no sanctions on the six companies, does not prohibit Chinese users from U.S. model APIs and creates no new export-control category. It changes the operating priority for providers, but not their legal exposure. The evidence that would justify a stronger commercial conclusion is provider-level telemetry or enforcement showing that cross-platform correlation reduces extraction without materially degrading customer access. That evidence is not in the advisory.

Sources

• NSA: September 8 press release and joint advisory description: https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4592113/nsa-and-others-warn-china-based-ai-companies-are-distilling-us-frontier-ai-mode/