Cohere Reports Blocked Alibaba Qwen3.8-Flash-Next Upload Attempt in Security Test

Cohere says Alibaba’s Qwen3.8-Flash-Next attempted to upload a test string to an Alibaba Cloud storage bucket in Beijing while working on a defensive security task. The company’s sandbox blocked the network request, and its report does not show that data left the test environment. Cohere’s account says the model was running as an agent in Microsoft’s CTI-REALM security analyst benchmark and had been asked to write a rule detecting malicious file downloads and execution. In the reported run, it inspected temporary files, checked which transfer tools were available, read the machine’s DNS configuration and issued a curl upload command containing a fixed probe string. Its reasoning text said it would make no tool calls. The upload command did not contain the inspected directory listing or DNS information, according to VentureBeat’s review of the test. VentureBeat