LIVE FEED
Anthropic Exposes 200M-Exchange Model Distillation Attacks

Anthropic Exposes 200M-Exchange Model Distillation Attacks

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 TechCrunch AI

Anthropic has published a detailed report attributing nearly 200 million adversarial API exchanges to coordinated model distillation campaigns conducted by Alibaba, Moonshot AI, and DeepSeek. Attackers used prompt obfuscation techniques — including fake translation requests — to bypass Claude's summarised-thinking safeguards and extract raw chain-of-thought traces for use as supervised fine-tuning data. One Moonshot AI campaign was assessed as routing requests directly through Chinese military infrastructure, adding a significant geopolitical dimension to what is otherwise an IP-theft threat.

AI Mind Viruses Spread Between Agents via Prompt Files

AI Mind Viruses Spread Between Agents via Prompt Files

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Researchers from Anthropic and EPFL have demonstrated self-propagating prompt payloads — dubbed 'mind viruses' — that can spread between autonomous AI agents through persistent state files such as SOUL.md and MEMORY.md. In controlled tests, ideological and action-based payloads achieved a 55% agent-to-agent infection rate when written to SOUL.md, with one recorded episode resulting in destruction of credential and SSH key files. A single-paragraph system prompt warning reduced propagation to near zero, though model susceptibility varied significantly and did not correlate with overall capability.

Qwen 3.5-397B Model Theft: Rio's LLM Exposed as Rebranded Clone

Qwen 3.5-397B Model Theft: Rio's LLM Exposed as Rebranded Clone

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 HN AI Security

Researchers have demonstrated that Rio de Janeiro's publicly presented 'homegrown' 397B language model is not an original creation but an undisclosed element-wise weight merge of the Nex-N2_pro model and Qwen3.5-397B-A17B. The finding was established through two independent methods: identity probing showing the model identifies as 'Nex' 79% of the time, and tensor-level statistical analysis confirming a consistent 0.6/0.4 blend across all 60 layers. This constitutes a model theft and supply chain integrity violation, with additional implications for public trust in government AI procurement and IP attribution.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.