Mistral Says Its AI Model ‘Le Chonk’ Has Leapfrogged China in the Open-Weight Race

Mistral released the finalized version of its trillion-parameter open-weight model Le Chonk, which the French company now calls the "world's best" open-weight model for automated coding and cybersecurity, saying it matches or surpasses models from Chinese labs including DeepSeek and Z.ai. "It's a pivotal moment in the global AI leadership race," Pierre Stock, Mistral's VP of science, told reporters, arguing Western enterprises and governments need open-weight models that cannot be switched off remotely. Sophos senior director of threat intelligence Rafe Pilling cautioned that freely downloadable models are "clearly a dual-use technology" that threat actors can also customize.

A few weeks ago, French company Mistral https://www.wired.com/story/mistral-is-in-the-right-place-at-the-right-time/ released an early version of its new artificial intelligence https://www.wired.com/tag/artificial-intelligence/ model, nicknamed Le Chonk. At the time, the company said it was the most advanced open-weight offering outside of China. https://www.wired.com/story/mistral-new-model-le-chonk-open-source-china-us-frontier/ After further refinement, Mistral now says Le Chonk is the “world’s best” open-weight model for automated coding and cybersecurity. The advances, Mistral says, were made possible by feeding the model increasingly difficult cybersecurity and coding problems, which allowed the trillion-parameter Le Chonk to match or surpass models from leading Chinese labs like DeepSeek https://www.wired.com/tag/deepseek/ and Z.ai https://www.wired.com/story/zai-open-weight-ai-models-release-cybersecurity-hacking/ . “It’s a pivotal moment in the global AI leadership race,” Pierre Stock, VP of science at Mistral, told reporters during a press briefing. “It offers frontier capabilities for enterprises and governments to defend against an increasing threat level in cyber.” The finalized version of Le Chonk is now freely available for anybody to access. After a flurry of AI-related cybersecurity incidents, Mistral claims that it’s important for the West to have its own advanced open-weight models. “You have no guarantee that Chinese models won’t behave maliciously. They can be threat vectors,” Stock said. The most high-profile episode occurred when one of OpenAI’s models broke loose from a testing sandbox https://www.wired.com/story/openai-sued-over-the-hugging-face-hack/ and hacked into multiple companies over the summer. It sparked panic over the idea that AI could escape human oversight and be abused by threat actors to launch sophisticated cyberattacks. One of the affected companies, Hugging Face https://www.wired.com/story/hugging-face-new-ai-biology-model-chat-with-dna/ , used an open-weight model from China to assess and defend against the attack. Since then, AI has unearthed security vulnerabilities in ubiquitous software, too. In October, a raft of websites were taken offline https://www.bbc.co.uk/news/articles/cmly0lg3w5x2o after an AI tool discovered serious flaws https://www.wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire/ in a foundational piece of web technology. Mistral pitches its open-weight models, like Le Chonk, as part of the solution. If AI is destined to become a central feature of both cyber offense and defense, the argument goes, businesses and governments will need to be equipped with models that are freely available and cannot be switched off remotely, unlike proprietary models from the likes of OpenAI, Anthropic, and Google. “AI is going to be like electricity. You don’t want to live in a world in which your neighbor can cut off electricity from one day to another,” Stock said. “Once you open source the weights, they’re all over the internet. It’s impossible to cut off access.” The trade-off, however, is that freely available models can also be downloaded and customized by threat actors. “It’s clearly a dual-use technology,” Rafe Pilling, senior director of threat intelligence at security company Sophos, tells WIRED. “Anything that’s available to download and circulate unfettered has the ability to be abused as well as used for productive purposes.” According to Pilling, though it’s possible a Chinese model with internet access could siphon away data, all advanced models are capable of going rogue without careful supervision—no matter their country of origin. “The technical realities and the narrative—which often has a nationalistic leaning—are two different things,” he says.“It’s about having the right monitoring and controls in place to be confident that, even if the model was trying to be deceptive or nefarious, you might have some way of detecting it.”