Chinese military reportedly uses American AI models to train its defense systems - tools from OpenAI and Anthropic reportedly among those affected

Distillation sidesteps the logic of US export controls, which restrict the chips needed to train frontier models but cannot restrict the text those models produce Review of more than 80 Chinese papers and patents found PLA-linked researchers distilling outputs from OpenAI and Anthropic models into s

<![CDATA[ <article> <ul><li><strong>Distillation sidesteps the logic of US export controls, which restrict the chips needed to train frontier models but cannot restrict the text those models produce</strong></li><li><strong>Review of more than 80 Chinese papers and patents found PLA-linked researchers distilling outputs from OpenAI and Anthropic models into small systems they can run locally</strong></li><li><strong>The Trump administration is increasingly critical of the approach and has claimed Chinese research lab-created Kimi K3 distilled Anthropic's Fable model</strong></li></ul><p>A new investigation has claimed Chinese military researchers have used outputs from American AI models built by OpenAI and Anthropic to <a href="https://www.reuters.com/world/asia-pacific/chinese-military-researchers-tap-us-ai-models-train-defence-systems-2026-07-31/" target="_blank">train domestic systems</a> intended to advance the country's defense capabilities.</p><p>The findings are based on a <a href="https://www.reuters.com/world/asia-pacific/chinese-military-researchers-tap-us-ai-models-train-defence-systems-2026-07-31/" target="_blank"><em>Reuters</em></a> review of more than 80 Chinese academic papers and patents, incorporating research compiled by the Washington-based Jamestown Foundation shared exclusively with the news agency.</p><p><em>Reuters</em> says it independently verified the literature and found a further two dozen military-linked case studies of its own.</p><h2 id="a-distillation-problem-in-an-ai-race-that-continues-to-heat-up">A distillation problem in an AI race that continues to heat up</h2><p>The mechanism at issue is model distillation, in which the outputs of a large, capable system are used as training data for a smaller one. The smaller model inherits selected behaviors at a fraction of the compute cost and, crucially, can run on modest local hardware.</p><p>That is the strategic point. Washington's export controls are built to deny China the chips needed to train frontier models. Distillation does not need those chips, because the expensive part has already been paid for by someone else. It sits alongside Beijing's other route around the controls: substituting domestic silicon for American designs, a shift that carries its own long-term threat to Nvidia and AMD.</p><p>Sunny Cheung, the Jamestown fellow who analyzed more than 60 of the papers, frames the value as reasoning rather than answers. Getting a model to produce the right output is comparatively easy, he told <em>Reuters</em>, but "teaching it the reasoning behind the answer is much harder." </p><p>The papers, on his reading, show Chinese military-linked researchers trying to move that expensive proprietary reasoning into small systems they can control and deploy themselves.</p><p>There is an irony in the pattern. Beijing has been moving to <a href="https://www.techradar.com/pro/the-great-ai-irony-china-cracks-down-on-western-models-while-us-companies-flock-to-deepseek">restrict consumer access to Western AI models</a> on security grounds, and has pushed its own labs <a href="https://www.techradar.com/computing/they-choose-not-to-buy-because-they-want-to-develop-their-own-china-just-refused-to-buy-a-single-nvidia-ai-chip-as-trumps-plan-backfires">away from US-designed chips</a>, even as its military researchers mine the outputs of American systems.</p><p>The asymmetry points at what is wrong with the US instrument. Export controls regulate objects: chips, tools, hardware that crosses a border and can be counted. The thing being transferred here is text a model produced- which crosses no border in any customs sense and cannot be enumerated. </p><p>The White House has registered the problem at both the <a href="https://www.bloomberg.com/news/articles/2026-07-22/white-house-official-says-moonshot-accessed-banned-nvidia-chips">chip</a> and <a href="https://www.reuters.com/legal/litigation/ai-grows-more-powerful-us-china-feud-threatens-safety-efforts-2026-07-24/">distillation</a> end, but registering it is not the same as having a lever. For now, the debate over whether distillation is theft or standard practice may matter less than the fact that neither answer offers a workable control.</p> </article> ]]>