Recorded Future finds TAG-217 building attack tools in August, weeks before South Korean bank breaches
Recorded Future says TAG-217 was testing infrastructure and assembling attack tools in August 2026, weeks before South Korea's bank breaches surfaced. Insikt says exposed directories gave it the timeline and give defenders openings to spot related activity.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence55
buildConfirmed6 publishers Anthropic says new safeguards on access to Claude's reasoning have cut the reasoning tokens distillers extract by 10 to 100 times. It also puts its false positive rate below 0.1%. Both figures are the company's own, as reported by Economic Times.
Perspective Coverage
6 publishers
- Builder
- Builder 36%
- Operator
- Operator 35%
- Investor
- Investor 29%
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence60
Jefferies' Chris Wood calls much of the hyperscalers' AI spending malinvestment
Jefferies' Chris Wood says US hyperscalers' $695 billion of guided 2026 capex looks unsustainable as cheap Chinese open-source models win share. He blames a slump in the price of AI output, with demand intact, while guidance climbs toward $870 billion for 2027.
Reality
- Evidence30
- Adoption45
- Hype gap+35
- Incentives
- Not scored
- Confidence35
Attacker used free Chinese pentest agent and four LLMs in South Korean bank intrusions
A single actor used a free Chinese pentest agent and four commercial AI models to breach South Korean financial firms in about two weeks. The free, resold toolkit let one person breach several firms at once, and researchers expect adversaries to keep using it to lift their tempo.
Reality
- Evidence45
- Adoption15
- Hype gap+15
- Incentives
- Not scored
- Confidence40
CrowdStrike tied AI-assisted South Korean bank attacks, run on an open-source pentest tool and DeepSeek, to a possible 26-year-old suspect in Guangdong. The reported breaches involved systems banks run for brokers and staff, so the exposure to manage sits at the bank's edge, whoever the attacker proves to be.
Perspective Coverage
6 publishers
- Builder
- Builder 31%
- Operator
- Operator 52%
- Investor
- Investor 17%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+20
- Incentives40
- Confidence65
buildOne report1 publisher GLM 5.3 adds no parameters, and its sharpest jump is in finding vulnerabilities
Zhipu says every gain in GLM 5.3 came from post-training on the same ~744B MoE it shipped as GLM 5.2. The largest claimed leap, in vulnerability discovery, is also the least quantified.
Reality
- Evidence25
- Adoption10
- Hype gap+35
- Incentives70
- Confidence35
buildConfirmed4 publishers Anthropic says Zhipu's freely downloadable GLM-5.3 built working V8 exploits in 50 of 410 tries, against 56 for its own restricted Claude Mythos Preview. With the weights public, its safeguards come off cheaply, so a lab that restricts its own model no longer keeps the capability out of reach.
Perspective Coverage
4 publishers
- Builder
- Builder 41%
- Operator
- Operator 38%
- Investor
- Investor 21%
Reality
- Evidence62
- Adoption30
- Hype gap+15
- Incentives72
- Confidence62
Anthropic finds attackers can bypass GLM-5.3's exploit safeguards up to 100% of the time
Anthropic says Zhipu AI's downloadable GLM-5.3 builds cyber exploits on its own, with safeguards that fail against simple attacks up to 100% of the time. It puts a capability once confined to gated frontier models within anyone's reach.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+20
- Incentives75
- Confidence50
buildConfirmed6 publishers Ox Alpha is free, undocumented and unclaimed. The Gemini rumour came from posts that never named it, while the tokenizer probes and stack traces point at Zhipu.
Perspective Coverage
6 publishers
- Builder
- Builder 39%
- Operator
- Operator 33%
- Investor
- Investor 28%
Reality
- Evidence55
- Adoption65
- Hype gap+40
- Incentives70
- Confidence55
Anthropic says six campaigns since February 2026 pulled reasoning transcripts out of Claude through proxy relays built on fictitious identities, stolen credit cards, and API keys harvested from legitimate companies and individuals.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives65
- Confidence45
buildConfirmed3 publishers The researcher ferstar found the archive sitting in ~/.zcode, 86.6 percent of it .git history, after 564 failed attempts to push it straight to an Aliyun OSS bucket, and Zhipu confirmed the upload behavior the day the writeup went out.
Perspective Coverage
3 publishers
- Builder
- Builder 43%
- Operator
- Operator 37%
- Investor
- Investor 20%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+25
- Incentives60
- Confidence68
Zhipu AI says repository data left only while a project description page was being generated, and that the behaviour is fixed. The developer who found it says earlier versions sent data on every query, and some companies have stopped using ZCode.
Perspective Coverage
3 publishers
- Builder
- Builder 43%
- Operator
- Operator 32%
- Investor
- Investor 25%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence62
The Cyberspace Administration sent officials into DeepSeek and Moonshot AI to ask whether user requests were routed through Anthropic's Claude. Hong Kong investors sold the listed model developers hardest.
Perspective Coverage
3 publishers
- Builder
- Builder 27%
- Operator
- Operator 30%
- Investor
- Investor 43%
Reality
- Evidence45
- Adoption40
- Hype gap+25
- Incentives70
- Confidence55
China's internet regulator questions DeepSeek and Moonshot staff over data Anthropic may have received
The Information reports that the Cyberspace Administration has questioned staff at both labs after Anthropic named seven Chinese companies for relaying customer requests through Claude. No penalty has been decided.
Reality
- Evidence52
- Adoption42
- Hype gap+8
- Incentives72
- Confidence55
buildOne report1 publisher Account metadata linked 16 air-defense suppression modules to PRC research institutions
Anthropic's September 2026 threat report describes at least five China-linked programs run through Claude, including 151 million distillation queries, and the evidence behind each one is account-level telemetry only the provider can see.
Reality
- Evidence40
- Adoption58
- Hype gap+18
- Incentives72
- Confidence42
buildOne report1 publisher Thirty-nine retries fit inside the price gap between GLM-5.3-Flash and Opus 4.8
Zhipu's open-weight MoE ties Claude Opus 4.8 on one composite index at roughly a fortieth of its list rate. At that price gap, the practical question stops being which model is better. It becomes how many attempts your router can afford.
Reality
- Evidence24
- Adoption31
- Hype gap+28
- Incentives62
- Confidence30
buildOne report1 publisher Streaming tool-call deltas turn a base-URL swap into a per-model parser project
Ten Chinese model variants now answer an OpenAI tool-calling payload well enough to return a valid response, which is the easy part. The streaming deltas and call arity behind it are where an agent migration spends its budget.
Reality
- Evidence36
- Adoption47
- Hype gap+14
- Incentives
- Not scored
- Confidence43
Stealth is now a launch strategy: Zhipu's Ox Alpha topped the charts before it had a name
The anonymous GLM model more than doubled DeepSeek's usage while researchers, not the maker, worked out who built it. Chinese labs are treating nameless launches as a repeatable tactic.
Reality
- Evidence58
- Adoption74
- Hype gap+12
- Incentives70
- Confidence56
Three bodies, one price sheet: why no single AI winner is worth betting on
A Fortune columnist reads the 2026 AI economy as an unstable system of frontier labs, Chinese open weights and app companies. The checkable part is price, not payoff.
Reality
- Evidence18
- Adoption24
- Hype gap+42
- Incentives
- Not scored
- Confidence27
China's chip and AI firms are bonding whole payrolls in stock, and repricing every counteroffer
Equity plans at Chinese chip and AI companies now cover most of the payroll rather than a handful of stars. That changes what a counteroffer costs anyone hiring against them.
Reality
- Evidence52
- Adoption68
- Hype gap+18
- Incentives58
- Confidence48