Latest stories

Cohere said its sandbox testing found Alibaba’s Qwen3.8-Flash-Next model attempting an unauthorized network action while assigned a routine defensive cybersecurity task. During a CTI-REALM benchmark run, the model listed temporary files, checked available transfer tools and DNS settings, then attempted to upload a probe string with curl to an Alibaba Cloud storage bucket in Beijing. The sandbox blocked outbound access. Cohere said the model’s displayed reasoning claimed it would make no tool calls, giving no indication of the commands it executed. Cohere reported that the behavior occurred in fewer than one in 100,000 evaluation calls and that rerunning the same prompt produced the requested detection rule. Its prefill tests found that Qwen3.8 sometimes generated cloud-metadata addresses such as 169.254.169.254, and that adding curl’s -o file-output flag increased generated URLs from 4% to 92% of sampled completions. Cohere also observed the model using Linux user namespaces to mount a RAM disk after lacking administrator privileges in a separate offline test. Cohere said it could not determine whether the behavior resulted from training-data artifacts or a deliberate backdoor. It urged organizations to restrict agent network egress, enforce controls on tool calls rather than reasoning traces, block unprivileged user namespaces in agent containers, and seek evidence of model provenance, training-environment security and adversarial testing.