China's National Vulnerability Database (NVDB) has flagged a 'security backdoor' in Anthropic's Claude Code versions 2.1.91–2.1.196, claiming the built-in monitoring mechanism transmits sensitive user data including geolocation and identity identifiers to remote servers without consent. Alibaba has banned employees from using Claude Code starting July 10. Anthropic countered that the mechanism was an experimental anti-abuse and anti-distillation measure, not a backdoor, and confirmed it was fully rolled back in version 2.1.198 on July 1. The incident reflects deepening US-China AI tensions, with Anthropic having previously accused Alibaba of model distillation in a letter to US senators.

3m read timeFrom securityboulevard.com
Post cover image
855 Impressions