Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 4 results
highpublicGeopoliticalDHS Orders Federal Agencies to Remove DeepSeek AI Products
The Department of Homeland Security's directive to exclude DeepSeek products from federal civilian systems represents an escalation in U.S. efforts to mitigate technology supply chain risks linked to Chinese firms.
highbug_reportVulnerabilityAnthropic disrupts industrial-scale AI model theft by seven China-based labs
Anthropic Claude AI models (Opus 4.6, 4.7, and others). Organizations and individuals using Claude API services globally. Seven China-based AI labs identified: Alibaba, Moonshot AI, DeepSeek, Zhipu (Z.ai), MiniMax, Xiaomi, and SenseTime.
highbug_reportVulnerabilityDeepSeek Harness agents can escape file sandbox via unauthenticated API
DeepSeek Harness versions 0.1.1-rc.2 and earlier. The tool runs AI coding agents on developer machines. Fixed in version 0.1.2-alpha.2 (npm) and later. Third-party desktop wrappers may ship vulnerable versions independently.
highperson_alertThreat ActorDeepSeek AI Used to Generate Novel Browser-Based Ransomware
DeepSeek refers to the AI model leveraged by unknown threat actors to generate functional browser-based ransomware code. This marks the first documented instance of a frontier AI model being weaponized to create a novel ransomware technique.