Hackers Distribute Claude Code Breach with Additional Malware

Hackers Distribute Claude Code Breach with Additional Malware

An investigation by WIRED utilizing records from the Department of Homeland Security this week uncovered the identities of paramilitary Border Patrol agents who often employed force against civilians during Operation Midway Blitz in Chicago last autumn. Several of the agents, according to WIRED, also participated in similar operations in various states across the US.

Customs and Border Protection might want to consider safeguarding its sensitive facility information. Through simple Google searches, WIRED found flashcards created by users on the online learning site Quizlet that included gate codes for CBP facilities and more.

In an unusual decision, Apple this week issued “backported” patches for iOS 18 to safeguard millions of users still utilizing the older operating system from the DarkSword hacking method that was discovered being used in the wild. Found in March, DarkSword enables attackers to compromise iPhones that simply visit a website containing the takeover tools. Apple first encouraged users to upgrade to the latest version of its OS, iOS 26, but eventually released the iOS 18 patches as DarkSword continued to proliferate.

The US-Israel conflict with Iran entered its second month this week, with Iran issuing threats to initiate attacks on over a dozen US companies, including major tech firms like Apple, Google, and Microsoft, which operate offices and data centers in the Gulf region. The perilous conflict, with no clear resolution in sight, continues to devastate the global economy as shipping crews remain stuck in the Strait of Hormuz, a vital trade passage. Meanwhile, some are starting to ponder what might occur if US strikes inflict significant damage on Iran’s nuclear sites.

And that’s not everything! Each week, we compile the security and privacy updates we didn’t delve into more comprehensively. Click on the headlines to read the complete stories. And stay safe out there.

Earlier this week, a security expert pointed out that Anthropic inadvertently made the source code for its well-known vibe-coding tool, Claude Code, public. Instantly, individuals began sharing the code on the developer platform GitHub. But be cautious if you wish to download some of those repositories: BleepingComputer warns that some of the individuals posting are actually hackers who have embedded a piece of infostealer malware within the lines of code.

Anthropic, for its part, has been actively working to eliminate copies of the leak (malware-laden or otherwise) by sending out copyright takedown requests. The Wall Street Journal <a href="https://www.wsj.com/tech/ai/anthropic-races-to-contain-leak-of-code-behind-claude-ai-agent-4bc5acc7?gaa_at=eafs&gaa_n=AWEtsqe0YqHxbezGhAXCQMkTM704xLIzPtDKH78qcGbyQlXZjxZuAmm8TxwV4QxfOvM%3D&gaa_ts=69

‘Eerie Chasm’: Iran’s Menaces Against US Technology, Trump’s Midterm Strategies, and Polymarket’s Temporary Failure

‘Eerie Chasm’: Iran’s Menaces Against US Technology, Trump’s Midterm Strategies, and Polymarket’s Temporary Failure

Kate Knibbs: So, you went there twice?

Makena Kelly: Yes, Kate. I went there twice.

Kate Knibbs: I missed that detail.

Zoë Schiffer: Hold on, is the Pentagon Pizza thing a joke about the pizza foretelling the war?

Makena Kelly: Yep.

Zoë Schiffer: Oh, my gosh.

Makena Kelly: Because they had these Pentagon pizza trackers set up. When I returned the second night, most things were running. Some displays were still off, and I didn’t spot any real Bloomberg terminals. There were a few self-made monitors that looked like Bloomberg terminals, but there was no authentic $50,000 Bloomberg terminal around. The second night was again crowded with people eager to witness the event, though I did run into a couple of individuals who wagered on sites like Polymarket and Kalshi. One of them, William, claimed he was in the military but didn’t provide his full name. He began betting last year with all his tax refund on Oklahoma City sports wagering.

Makena Kelly, archival audio: So, you’ve used Kalshi?

William, archival audio: Yes.

Makena Kelly, archival audio: When did you first start using that service?

William, archival audio: Probably when I got my tax refund back.

Makena Kelly, archival audio: Got it.

William, archival audio: So, I filed my taxes early and thought, “Awesome, I got my tax refund. What should I do with it?” So, I chose to put it on Kalshi.

Makena Kelly: He noted he’s fluctuating by $100 but hasn’t scored any big wins. Unlike some tales of people making enormous insider bets and winning millions, he’s just in it for the enjoyment.

Brian Barrett: Kate, what’s your take on a pop-up like this and Polymarket’s intentions—is it a move to legitimize or just a promotional strategy? And how does it align with these companies’ rapid growth and their effort to attract a wide audience?

Kate Knibbs: This event clearly appears to be a strategic effort to appeal to journalists based in DC. One observation Makena made encapsulates the current situation—the individuals in the Palantir hoodies. The week this bar launched, Polymarket announced a collaboration with Palantir, who will assist them in ensuring the integrity of their sports market by identifying insider traders and market manipulators. I inquired with Polymarket last week if they had additional agreements with Palantir while investigating the Iran bets that are stirring up a lot of attention. They stated Palantir is only involved with sports, which seemed peculiar. It indicates how rapidly they’re growing, but in a chaotic, rushed manner that doesn’t seem coherent. If you’re engaging Palantir, why not use them for geopolitical issues instead of March Madness? Truly wild times.

AI Research Is Becoming More and More Interwoven With Geopolitics

AI Research Is Becoming More and More Interwoven With Geopolitics

The prominent AI research event, NeurIPS, recently encountered a controversy intertwining geopolitics with worldwide scientific cooperation. The conference initially set forth but quickly revoked new limitations on international participation after Chinese AI researchers indicated a possible boycott. Paul Triolo from DGA-Albright Stonebridge emphasized the necessity of drawing in Chinese researchers to serve US interests, amidst American demands to sever AI collaborations. These strains pose a risk of discouraging Chinese researchers from interacting with US academic institutions and technology firms. NeurIPS first delineated restrictions in its handbook, associating with US-sanctioned organizations, impacting researchers at companies such as Tencent and Huawei. The listing also encompassed Russian, Iranian, and other foreign entities. In light of the outcry, NeurIPS narrowed the restrictions to a list aimed at terrorist and criminal groups. The organizers acknowledged a mistake, attributing it to a lapse in communication with their legal team. The revised rule elicited a prompt reaction, especially from China, a key hub for AI expertise. Chinese academic organizations condemned the action, dissuading participation and advocating for national conferences. The China Association of Science and Technology (CAST), a notable body, revealed it would shift funding from NeurIPS attendance to endorse other conferences valuing Chinese scholars, also indicating that NeurIPS 2026 publications would not be counted towards research funding assessments, unless any policy change occurs.

Wall Street Struggles with AI Hysteria

Wall Street Struggles with AI Hysteria

Before the prior week, very few were familiar with the name Alap Shah. The 45-year-old financial analyst and technology entrepreneur had been laboring quietly for two decades. Then, over the weekend, he co-authored a blog with the research company Citrini titled “The 2028 Global Intelligence Crisis.” It was a speculative article discussing the repercussions of artificial intelligence, predicting that by June in that year, AI would elevate unemployment beyond 10 percent and result in considerable market downturns. With a self-assured, prophetic style reminiscent of a Michael Lewis narrative, the authors depicted a negative feedback loop: AI agents displace jobs, consumer spending declines, and firms resort to perpetual layoffs.

Much of the content was familiar territory. Tech figures like Anthropic CEO Dario Amodei have already stated that half of the entry-level white-collar positions will disappear shortly, and Anthropic’s launch of new AI tools earlier this year brought about a sell-off on Wall Street. Nevertheless, the report made a substantial impact, coinciding with a significant drop in the Dow. Alap Shah’s name received unexpected notoriety.

Upon closer inspection, however, the reaction is not as remarkable. Similar to the general public, Wall Street is extremely worried about AI, with minor provocations causing considerable market fluctuations. Financial markets don’t always mirror reality, but these reactions highlight a broader anxiety. The AI future, reminiscent of a William Gibson concept, is unevenly distributed, leading to thrilling yet disconcerting developments.

No one completely grasps AI’s economic influence, but it is destined to be significant. Currently, stock values are elevated, encouraging market hopefulness. However, ominous reports or studies suggesting potential AI-induced disruptions remind investors of the unresolved and urgent issues at play. For example, earlier this month, a small company shifted from selling karaoke machines to AI logistics and released a report on enhancing truck loading efficiency, resulting in major losses in key logistics stocks, none of which had any prior connections to karaoke.

Following its effect on Wall Street, the Citrini report faced considerable backlash. Critics quickly pointed out its flaws. Some contended that AI has not yet had a meaningful effect on the economy. Others referenced historical resilience after technological advancements. A satirical response from Citadel Securities dismissed the report’s conclusions by outlining improbable conditions under which AI could instigate a lasting economic shock.

The most intense criticisms targeted the report’s claim that much of the economy is composed of unproductive middlemen and market makers exploiting public complacency. Shah argued that AI agents will enable consumers to effortlessly find the best deals, rendering apps unnecessary. He pointed out that DoorDash represents this transformation; consumers could circumvent apps, employing AI agents to directly arrange meals from restaurants and delivery services, resulting in a seamless experience. The implication is that companies like DoorDash are essentially comparable to outdated trends.

Who’s Your Parent? A Chatbot

Who’s Your Parent? A Chatbot

Alesandra Madison encountered her husband employing AI in their partnership in late 2024. She had longed for her “nightly kneeling ritual,” which led him to seek advice from ChatGPT on how to administer discipline. The AI recommended a dual punishment of composing 100 lines while maintaining the kneeling position. Despite having explored kink with her husband for 15 years, this AI-driven method was unprecedented for them.

Madison, 44, hailing from Los Angeles, now perceives AI as a vital enhancement tool for kink practices, providing new insights into their relationship. AI is increasingly recognized as a dynamic influence in BDSM, offering a distinctive space for trust and dialogue free from judgment.

A user on the r/SubSanctuary subreddit remarked on the benefits of utilizing AI for better self-understanding as a submissive, emphasizing AI’s adaptability and constant accessibility. While some find it appealing, others critique AI dominants as “shallow entertainment” or “hazardous.”

As discussions surrounding AI intensify, platforms such as Joi AI, Character.AI, Replika, and Soulmaite present AI-enabled BDSM chatbots. These services enable users to investigate diverse dynamics, with certain sex workers like Alix Lynx and Jenna Starr permitting their images for these platforms. Developers strive to produce apps for immersive and intelligent role-play dialogues. Oxy shop, a retailer of BDSM gear, now features an AI-powered “BDSM chat” for individuals seeking dominatrix encounters.

Carolina Bandinelli from the University of Warwick observes that AI chatbots create a venue for expressing sexual fantasies, empowering users to design and shape their ideal dynamic, illustrating the fantasy intrinsic to human-AI interactions.