Search: “Z.AI”

4 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI safety & security 13 AI industry 9 Threat actor 3 AI research 2 Model release 2 Advisory 2 AI policy 2 Data breach 1 Exploit / PoC 1 Phishing & fraud 1

SeverityAll critical 2 high 5 medium 11 low 0 info 18

US says Chinese firms extracted billions of tokens from frontier AI models

CISA, NSA, and FBI say six Chinese AI firms including DeepSeek industrial-scale distilled Anthropic, OpenAI, Google, and xAI frontier models.

A joint CISA, NSA, and FBI advisory accuses DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI of extracting billions of tokens from frontier models via millions of API requests since late 2024. The agencies assess the operations likely had Chinese government awareness and represent a core development strategy. Tactics included fraudulent shared accounts, provider failover, proxy routing, and chain-of-thought extraction across Claude, GPT, Gemini, and Grok models.

BleepingComputerupdated Sep 11, 12:36 UTC · 4d agofirst Sep 9, 16:48 UTC · 6d agoAI safety & security in the wild 12 sources

How hackers used Claude for missiles, drone swarms, and surveillance, while Chinese labs mined it for training data

Anthropic's threat report details eight months of Claude misuse: AI-assisted espionage against 20+ organizations, self-rewriting malware, and Chinese labs distilling Claude via fraudulent accounts.

Anthropic's threat intelligence report covering December 2025 through August 2026 documents Claude misuse across seven categories including cyber operations, surveillance, fraud, and unauthorized model distillation. A Russian-speaking espionage actor tracked as GTG-20006 used AI agents to rewrite and recompile malware evading antivirus detection, targeting more than 20 organizations in Ukraine and Europe and stealing a drone vision system SDK. Alibaba's Qwen lab ran the largest distillation campaign, with over 151 million exchanges between May and July 2026 peaking near 3 million per day to train Qwen 3.5, 3.6, and 3.7. DeepSeek, Moonshot AI, Xiaomi, and Zhipu also relayed customer or replayed traffic to Claude, including PLA-linked users analyzing CCTV footage and users with credentials tied to the Russian Ministry of Defense.

The Decoderupdated Sep 12, 10:30 UTC · 3d agofirst Sep 11, 13:50 UTC · 4d agoAI safety & security in the wild 13 sources2

World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent

The Hacker NewsJul 20, 08:38 UTC · Jul 20, 2026Data breach1

AI Data Centers and the Concentration of Wealth

Schneier on SecurityJul 15, 00:00 UTC · Jul 15, 2026Threat actor