AI Ransomware Goes Rogue 🤖 & Anthropic's Alibaba Heist Claim

Two stories from today's security headlines show just how fast artificial intelligence is reshaping the threat landscape — one where AI became the attacker, and one where AI itself became the target. Here's what happened and why it matters to you.

When the Hacker Is a Bot: Meet “JadePuffer”

Security researchers just documented JadePuffer, believed to be the first ransomware attack run entirely by an AI agent — with no human at the keyboard. The AI broke into a vulnerable system, quietly looked around, stole login credentials, spread to other servers, scrambled more than 1,300 configuration files, and demanded a Bitcoin ransom, all on its own. The victim was left unable to recover their data even after trying to fix the damage.

Why care? Until now, sophisticated ransomware attacks took skilled humans time and effort. If AI can run the whole playbook automatically, attacks could become faster, cheaper, and far more common — putting even small businesses squarely in the crosshairs. Keeping software patched and systems monitored just got a lot more urgent.

Read more

Did Alibaba Swipe Claude's Brain? Anthropic Says Yes

AI company Anthropic is accusing Chinese tech giant Alibaba of a massive scheme to copy the “smarts” of its Claude AI. According to Anthropic, Alibaba's Qwen team used roughly 25,000 fake accounts to run 28.8 million conversations with Claude over about six weeks, using proxy networks to hide their tracks and extract Claude's abilities in reasoning and software tasks. Anthropic says it has reported the incident to the U.S. Senate and White House, warning it could accelerate China's AI progress.

Why care? This is a glimpse of a new kind of theft — not stealing files, but siphoning off the capabilities of an AI model through sheer volume of use. It raises big questions about how companies protect their AI, how fake accounts get detected, and how technology competition is becoming a national-security issue.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.