[minimax]

September 13, 2026

• Anthropic names seven China-based labs over illicit distillation, including Alibaba, Moonshot, DeepSeek, Z.ai and MiniMax, in seven campaigns detected since February 2026. The described access routes are proxy or relay stations spinning up thousands of accounts on fake identities, stolen cards and harvested corporate API keys, transcripts bought from resellers, and — in some cases — labs rerouting their own users' requests to Claude to harvest the exchanges (The Hacker News, earlier coverage). · AI-Enabled Threat Activity

in Artifactory Chains Give Attackers Admin in Under Five Minutes

September 9, 2026

• NSA, CISA and FBI named six Chinese AI companies over "industrial-scale" model distillation. The joint advisory says DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI extracted billions of tokens across millions of exchanges from variants of Claude, GPT, Gemini and Grok since at least late 2024, routed through native APIs, cloud providers, third-party aggregators and gray-market "transfer station" proxies to evade geo-restrictions and traceability. Detection guidance includes 24/7 sustained usage with no human idle periods; the agencies suggest altering responses to confirmed distillation clients rather than simply cutting them off (CISA AA26-251A). · AI & Model Security

in One Phone Call, Zero Clicks: A WeChat Worm Crossed iOS and Android