logo

OpenAI reveals ‘novel’ encryption bypass used in distillation attack 

ID: 7c73d56f-f9d7-5fd3-bff2-cb17b6aaa12b

STIX ID: report--7c73d56f-f9d7-5fd3-bff2-cb17b6aaa12b

Feed Name: CyberScoop

Threat Score
65/100

Date Published: 2026-09-30

Date Updated: 2026-10-01

Author: djohnson

...
...

OpenAI reported disrupting a coordinated campaign that systematically extracted protected reasoning outputs from its models by copying encrypted reasoning from one conversation and prompting decryption in another; the company observed thousands of suspicious users and prompts, partially attributed a core cluster to China-based Moonshot AI, fixed a bug enabling cross-conversation decryption, and implemented tighter controls and monitoring.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.