Anthropic report confirms DeepSeek and Kimi silently routed user requests to Claude; Pro 20x halts new sign-ups same day

2026-09-10 群聊日报

Anthropic's September threat report reveals DeepSeek and Moonshot (Kimi) silently forwarded user requests to Claude without consent, exposing code and credentials to third parties. A 6TB data leak from the same router contained SSH keys, cloud credentials, and GitLab tokens capable of compromising 7 government entities and 19 enterprises. The report also names seven Chinese labs—including Alibaba, Zhipu, and Xiaomi—for large-scale distillation attacks on Claude totaling over 180 million interactions. The same day, Anthropic paused new $200 Pro 20x subscriptions as Astra capacity tightened. DeepSeek launched V4.1 Flash, merging its Pro and Flash lines; V4 Pro sunsets September 14. Zhipu partnered with Hangzhou's Shangcheng district on a city-wide coding subsidy, offering 51% off annual personal plans.

Why it matters: Anthropic official threat report + 6TB leak evidence + seven Chinese labs named for distillation — three threads converging into a security event cluster. All three HKR axes hit, with enough density and industry impact for featured. Not scoring higher because this is a curated...