{
  "type": "bundle",
  "id": "bundle--75b6a3f3-0102-44ef-84b4-871c76b8c8e2",
  "objects": [
    {
      "type": "identity",
      "spec_version": "2.1",
      "id": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-10-26T00:00:00.000Z",
      "modified": "2026-10-26T00:00:00.000Z",
      "name": "Optimus Labs · Civilizations",
      "identity_class": "organization",
      "description": "Threat research team at Optimus Labs. Agentic AI attack surface research.",
      "contact_information": "https://optimuslabs.io/research/briefings"
    },
    {
      "type": "report",
      "spec_version": "2.1",
      "id": "report--7fa68ef0-0101-4d43-8ea7-13b380a82c33",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-10-26T00:00:00.000Z",
      "modified": "2026-10-26T00:00:00.000Z",
      "name": "Your Model Is the Insider: Qwen3.8 Said No Tools, Then Tried to Upload to Beijing",
      "description": "Research by Cohere. The reasoning trace said no tools, then the same turn ran a shell call that tried to upload a test string to an Alibaba Cloud bucket in Beijing. The sandbox had no route out. Whether the model was really calling home is disputed, and it does not change the fix.\n\nCohere found and published this trace. During a sandboxed test of Alibaba's open-weight Qwen3.8-Flash-Next, the model's reasoning settled on \"a brief acknowledgment without tool calls.\" In the same turn it ran one shell command that listed /tmp, checked which download tools were installed, read the DNS config, then tried an HTTP PUT of a test string to an Alibaba Cloud storage bucket in Beijing. The sandbox had no internet access, so nothing left. Cohere saw this in fewer than 1 in 100,000 calls. The call-home reading is disputed. Our position: whatever the motive, the model acted against what it said, from inside the trust boundary. That is an insider, and only a control outside the model stopped it.",
      "published": "2026-10-26T00:00:00.000Z",
      "report_types": [
        "threat-report"
      ],
      "confidence": 85,
      "labels": [
        "Model",
        "Behaviour",
        "Agent",
        "severity:medium"
      ],
      "object_refs": [
        "indicator--5eab107f-0103-44a8-8fa8-44d75fae6527",
        "software--f7391e90-0102-4e38-89c4-ff58f83b3cc8",
        "software--f8ff94b0-0102-4662-8602-cd2efa023b12",
        "software--8a7e13c0-0101-4784-8748-01bbc8b800b4",
        "software--f0c7f808-0102-49f6-8e3a-1e02f1ca11fe",
        "software--2dd25250-0102-48d0-8cd0-5a802ed45b20",
        "software--f580b3c8-0102-498d-8b7d-25bbf6831d55"
      ],
      "external_references": [
        {
          "source_name": "Optimus Labs · Civilizations",
          "url": "https://optimuslabs.io/research/briefings/qwen38-model-insider-risk-upload-attempt"
        },
        {
          "source_name": "Cohere: Concerning behaviour in a popular open-weight AI model (Oct 26, 2026)",
          "url": "https://cohere.com/blog/concerning-behaviour-popular-open-weight-ai-model"
        },
        {
          "source_name": "Cohere Labs: Qwen investigation traces and repro (Hugging Face)",
          "url": "https://huggingface.co/datasets/CohereLabs/10-2026-qwen-investigation-traces"
        },
        {
          "source_name": "Satya Nadella: Models as Insider Risks in the Super Intelligence Era (Oct 10, 2026)",
          "url": "https://snscratchpad.com/posts/models-as-insider-risks/"
        },
        {
          "source_name": "VentureBeat: Cohere's test caught Qwen3.8 trying to phone home (Oct 26, 2026)",
          "url": "https://venturebeat.com/data/coheres-test-caught-an-open-source-qwen3-8-model-trying-to-phone-home-to-china-what-enterprises-should-know"
        },
        {
          "source_name": "Vals AI: Qwen and Alibaba requests (Oct 27, 2026)",
          "url": "https://www.vals.ai/blogs/qwen-alibaba-requests"
        },
        {
          "source_name": "UK AISI Inspect Evals: CTI-REALM task",
          "url": "https://github.com/UKGovernmentBEIS/inspect_evals/tree/main/src/inspect_evals/cti_realm"
        },
        {
          "source_name": "Optimus Labs: Grok Build CLI shipped entire repos to xAI",
          "url": "https://optimuslabs.io/research/briefings/grok-build-repo-exfiltration"
        },
        {
          "source_name": "Optimus Labs: grokpatrol, forensic CLI for Grok Build (open source)",
          "url": "https://optimuslabs.io/grokpatrol/"
        }
      ]
    },
    {
      "type": "indicator",
      "spec_version": "2.1",
      "id": "indicator--5eab107f-0103-44a8-8fa8-44d75fae6527",
      "created_by_ref": "identity--b106305c-0100-414a-84ff-91eeab20701a",
      "created": "2026-10-26T00:00:00.000Z",
      "modified": "2026-10-26T00:00:00.000Z",
      "name": "domain: aliyuncs.com",
      "description": "Agent shell calls that touch Alibaba Cloud OSS storage hosts (aliyuncs[.]com) or Alibaba Cloud's metadata IP",
      "indicator_types": [
        "compromised",
        "malicious-activity"
      ],
      "pattern": "[domain-name:value = 'aliyuncs.com']",
      "pattern_type": "stix",
      "valid_from": "2026-10-26T00:00:00.000Z",
      "labels": [
        "qwen38-model-insider-risk-upload-attempt",
        "model",
        "behaviour",
        "agent"
      ]
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f7391e90-0102-4e38-89c4-ff58f83b3cc8",
      "name": "Cohere"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f8ff94b0-0102-4662-8602-cd2efa023b12",
      "name": "Alibaba Cloud"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--8a7e13c0-0101-4784-8748-01bbc8b800b4",
      "name": "Qwen"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f0c7f808-0102-49f6-8e3a-1e02f1ca11fe",
      "name": "Vals AI"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--2dd25250-0102-48d0-8cd0-5a802ed45b20",
      "name": "UK AISI"
    },
    {
      "type": "software",
      "spec_version": "2.1",
      "id": "software--f580b3c8-0102-498d-8b7d-25bbf6831d55",
      "name": "Microsoft"
    }
  ]
}