Starting July 10, 2026, employees at Alibaba were told to stop using Anthropic’s Claude Code and switch to Qoder, the company’s own internal coding tool. On its own, a company banning one vendor’s software isn’t unusual. What makes this case worth understanding is why: it sits at the center of two separate, serious accusations running … Read more
In early July 2026, Alibaba told its employees to stop using Anthropic’s Claude Code and switch to an internal tool instead. The dispute behind that decision involves two separate accusations — one about hidden tracking code, and one about something called a “distillation attack.” The second term is the one most readers have never heard, … Read more
On July 1, 2026, Sysdig’s Threat Research Team published findings on an extortion campaign it named JADEPUFFER — describing it as an “agentic ransomware” operation in which, according to Sysdig’s analysis, an autonomous AI agent carried out the entire attack chain, from initial compromise to database encryption, with minimal human direction. BleepingComputer covered the findings on July … Read more
Scroll through security news for even a week and you’ll see the same three letters again and again: RCE. It’s attached to some of the most severe vulnerabilities ever disclosed — critical flaws in web servers, VPN appliances, AI tools, and enterprise software that get patched immediately because leaving them open is treated as an … Read more
Introduction For most of the past two decades, the security industry operated on an implicit assumption: defenders had time. A vulnerability would be discovered, a CVE would be published, a patch would ship, and enterprises would deploy it — imperfectly, slowly, but eventually. The attacker’s window existed, but it was measured in weeks or months. … Read more