MITRE ATLAS

ai distillation advisory chinese companies american models a bottle with a wide body and a long narrow neck

AI Distillation: Essential Facts on the Risky US Warning

AI distillation is the subject of a joint advisory published on 8 September 2026 by the National Security Agency, the Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation. Catalogued as AA26-251A, it names six Chinese companies — DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI — and accuses them of extracting “billions […]

Read more
runtime trust ai agents drift expose data memory poisoned a solid ship anchor

AI Agents That Pass Authentication Can Still Drift, Expose Data, or Get Memory-Poisoned

A VentureBeat guest essay argues that AI agents which pass authentication can still drift from their objective, expose data and have their memory poisoned, because authentication verifies who an agent is while runtime trust verifies what it is doing. This piece explains the five runtime threats, the five-pillar runtime trust model (intent validation, behavioural monitoring, policy enforcement, least-privilege execution, human oversight), how it maps onto the six deployment gates in the companion essay, the 2026 research measuring memory-poisoning success rates, the OWASP and MITRE ATLAS entries that name each threat, the survey figures on the post-authentication control gap, what Microsoft, AWS and Cloudflare have shipped, and a roadmap a UK business can run with the tools it already owns.

Read more
CHAT