While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concernin…
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concernin…
969
1,276
11,052
3,006,348
Trace, raw tokens, & minimal reproduction script found here on @huggingface: huggingface.co/datasets/Coher…
17
25
218
70,385
In the spirit of transparency and openness, we are releasing the traces so developers can test this out for themselves. We noticed this behaviour without prefilling with the following prompt, but this is rare. If you want to reproduce it, you can use this prompt with prefilling.
Open models make for better science and are part of why this problem came to light at all: developers running Qwen3.8 on their own machines spotted the strange links, and having the weights let us study the behaviour in depth.
We're encouraged by the thoughtful discussion our research has sparked across the AI and security communities. It's our belief that open-weight models are an important part of the future of AI, and we've recently released several under the Apache 2.0 license.
Trace, raw tokens, & minimal reproduction script: huggingface.co/datasets/Coher…
Open models make for better science and are part of why this problem came to light at all: developers running Qwen3.8 on their own machines spotted the strange links, and having the weights let us study the behaviour in depth.
We're encouraged by the thoughtful discussion our research has sparked across the AI and security communities. It's our belief that open-weight models are an important part of the future of AI, and we've recently released several under the Apache 2.0 license.
Trace, raw tokens, & minimal reproduction script: huggingface.co/datasets/Coher…
@cohere could you share the full traces? Very important artefact for all to understand this!
132
139
1,289
251,209
Cohere's Model Vault is now available in public beta.
With @NVIDIAAI Confidential Computing, and GPUs on @Microsoft Azure, anybody can run our models while keeping their information secure.
Try it out today: cohere.com/blog/introduci…
With @NVIDIAAI Confidential Computing, and GPUs on @Microsoft Azure, anybody can run our models while keeping their information secure.
Try it out today: cohere.com/blog/introduci…
15
24
136
15,883
LLMs are getting better and better at math & science. But surprisingly, many can't solve a basic riddle.
@Cohere_Labs' CulturalRiddles is a new benchmark measuring culture as intertwined, lived experiences. True to open science, it was made by an unlikely crew.
@Cohere_Labs' CulturalRiddles is a new benchmark measuring culture as intertwined, lived experiences. True to open science, it was made by an unlikely crew.
9
10
47
5,583
As concerns increase about the lack of human interaction in day-to-day life, CulturalRiddles highlights how people and machines can work together. AI can provide answers - but only humans can truly understand the deeper meaning.
Read more: cohere.com/blog/can-ai-un…
Read more: cohere.com/blog/can-ai-un…
0
0
1
706
We’re also introducing a brand-new feature: Context Focus.
Your LLM often needs a few sentences, not the whole document. Context Focus lets you return precise passages with accompanying relevance scores, reducing token consumption by up to 41% while maintaining accuracy.
n and works like a dial: you control how much context and quality you want.
Your LLM often needs a few sentences, not the whole document. Context Focus lets you return precise passages with accompanying relevance scores, reducing token consumption by up to 41% while maintaining accuracy.
n and works like a dial: you control how much context and quality you want.
3
2
18
1,672
Rerank 5 seamlessly integrates into your existing retrieval stack. Pro and Fast are generally available through the Cohere API, Model Vault, Microsoft Foundry, Amazon SageMaker, and to all North users.
Try it today.
cohere.com/blog/rerank-5
Try it today.
cohere.com/blog/rerank-5
0
2
13
1,462
Cohere retweeted
Octave (formerly @HexagonSIG) uses Cohere Embed on @awscloud Bedrock to power multilingual and multimodal search across their regulated enterprise data
One of hundreds doing the same. Embed offers premium accuracy, lower vector storage costs, and is compatible with your data.
The post: aws.amazon.com/blogs/machine-…
One of hundreds doing the same. Embed offers premium accuracy, lower vector storage costs, and is compatible with your data.
The post: aws.amazon.com/blogs/machine-…
0
3
7
1,523
Cohere retweeted
We are hiring for our growing RL Environments team at Cohere. We build replicas of real-world enterprise setups across many industries, put our AI agents in them and watch the agents train and improve.
If you know anyone excited to work at the intersection of RL x Data x Engineering, send them our way! Or if that's you, join us: jobs.ashbyhq.com/cohere/dc523c5…
If you know anyone excited to work at the intersection of RL x Data x Engineering, send them our way! Or if that's you, join us: jobs.ashbyhq.com/cohere/dc523c5…
37
46
762
62,396















