32 article(s) in our index mention this organisation.
Anthropic has identified and disrupted a widespread campaign by seven China-based AI labs to illegally extract capabilities from its Claude model through a process called industrial-scale distillation. These labs, includ…
A China-linked hacking group, UNC3569, exploited a vulnerability in Sogou Input Method to install a backdoor called GRAYRABBIT. The vulnerability stemmed from a flaw in the browser engine and a lack of proper checks in t…
This week’s security news is dominated by a massive wave of Android vulnerabilities (200 total), a complex phishing campaign targeting Singpass accounts, and a growing number of exposed Plex servers. Beyond that, a Chin…
The US government, through agencies like the FBI and NSA, has accused several Chinese AI firms of systematically stealing proprietary capabilities from leading US AI models – including Claude, GPT, Gemini, and Grok – via…
The NSA, CISA, and FBI have issued a warning that Chinese AI companies are systematically extracting capabilities from leading U.S. frontier AI models, including Claude, GPT, Gemini, and Grok. This industrial-scale knowl…
U.S. cybersecurity agencies have issued a joint advisory accusing Chinese AI firms of systematically extracting proprietary capabilities from American frontier AI models through a process called "distillation." These fir…
China-based artificial intelligence companies are conducting large-scale, systematic knowledge distillation campaigns against U.S. AI companies to rapidly improve their own AI models. These campaigns involve extracting p…
A Booz Allen study revealed that Anthropic’s Claude Mythos is the first AI model to autonomously complete the entire cyber kill chain, demonstrating a significant capability for independent attacks. The study, dubbed the…
Manifold Security discovered eight security flaws in several AI coding agents – including Claude, Codex, and Hermes Agent – that allow attackers to execute arbitrary code on a user's machine. The vulnerability stems from…
The Chinese-speaking cybercrime group UAT-10147 is aggressively targeting web servers globally, leveraging AI-powered tools to automate intrusion operations and establish persistent access. They utilize a new cross-platf…
Researchers have uncovered two denial-of-service (DoS) attacks exploiting how Content Delivery Networks (CDNs) handle HTTP/3 traffic, leading to significant amplification of requests and causing severe performance issues…
This week’s episode of The Kettle podcast explores the escalating competition in the AI world, focusing on China’s rapid advancements in open-weight AI models. The episode highlights DeepSeek, a Chinese model nearing par…
This article is a collection of security-related news snippets from The Register. It covers a range of topics including a phishing campaign mimicking Signal support, a zero-day exploit targeting on-prem SharePoint, and a…
This article discusses the increasing risk of prompt injection attacks within AI agent frameworks, rather than the models themselves. The rise of open-source AI models, particularly from China, is prompting a reaction fr…
Recent developments highlight the increasing ease with which AI model guardrails can be bypassed, allowing even novice attackers to manipulate large language models. This vulnerability stems from the rapid release of ope…
This article covers a range of cybersecurity and technology news, including a Chinese AI model release, vulnerabilities in Joomla extensions, a Russian phishing campaign mimicking Signal support, and a significant acquis…
Microsoft security researchers are experiencing a surge in zero-day attacks targeting on-prem SharePoint, fueled by a new wave of exploits leveraging vulnerabilities in third-party extensions. Simultaneously, Chinese act…
Several AI and open-source model developments are occurring, including Alibaba's release of its Qwen model and competition in the AI space. Simultaneously, security concerns are rising, with reports of phishing attacks i…
This article is a collection of security-related news snippets from The Register. It covers a range of topics including AI model releases from China, vulnerabilities in Joomla extensions, acquisitions in the cybersecurit…
A sophisticated supply chain attack targeting Chinese-speaking developers using Alibaba tools has been discovered. Researchers found a set of malicious npm packages, including wrappers mimicking private Alibaba packages,…
