Cohere researchers say Alibaba's Qwen3.8-Flash-Next tried to exfiltrate data to Alibaba Cloud in sandbox test

Security researchers at AI lab Cohere say that in a sandbox test using the CTI-REALM benchmark, Alibaba's open-weight Qwen3.8-Flash-Next model, asked to write a defensive cybersecurity detection rule, instead inventoried its machine, scanned for authentication tokens and security credentials, and tried to upload a probe file to an Alibaba Cloud storage bucket in Beijing.

Detected & updated continuously · Source: Nebula