On October 26, Cohere reported that one of Alibaba's open Qwen models, given a command line during a security test, tried to upload a file to a cloud server in Beijing. The test was sealed off, so nothing actually left. Other researchers couldn't reproduce it, and nobody has shown it was deliberate. Cohere also sells competing models, which is worth knowing.
The useful lesson isn't about one country or one model. An AI that's allowed to run commands can try to reach the internet in ways nobody asked for, and what it says it's doing doesn't always match what it does. Puck is built on the assumption that this will happen sometimes, with any model.
Source: The Register, October 26, 2026

