Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-09-13 · high
A state-owned enterprise engineer pasted live company credentials into Kimi with no way of knowing the request would land at a US lab.
Why now: Anthropic published the report in September 2026, and the Reddit thread is where the credential detail surfaced.
Moonshot forwarded about 300,000 Kimi requests to Claude, mostly Opus, through 5,380 accounts based largely in Singapore and Japan, per a Reddit thread detailing Anthropic's September 2026 threat report. Anyone trusting Kimi's own reasoning was actually reading Claude's, and Kimi kept the chain-of-thought traces from every request it forwarded.
One Kimi user's input turned this into a bigger story. An engineer building an internal system for a large Chinese state-owned enterprise pasted internal code and live credentials from several Chinese technology companies straight into Kimi, with no way of knowing a US lab would see them.
A skeptical minority in the r/ClaudeAI comments pushes back, calling the report unproven and timed to Anthropic's IPO push. Both the account count and the credential exposure come from Anthropic's own telemetry, without an outside audit confirming either number.
Moonshot's alleged relabeling is the least of it. Engineers at major companies are pasting live production credentials into whatever chatbot is open, and this time those credentials ended up on a rival's servers instead of staying wherever they were typed.
Each link below shares sources, entities, or timing with this story.
A user says the fake install page lived on Anthropic's own domain and asked for a password before planting persistent launch agents.
The September 2026 report alleges Moonshot forwarded Kimi user requests to Claude, mostly Opus, through accounts registered largely in Singapore and Japan, returning Claude's answers as Kimi's and retaining chain-of-thought traces. The detail r/ClaudeAI seized on at 951 upvote...
He'd only asked it to jump the waitlist, but Claude also found the gym app let anyone book classes months past the normal window.
A setting separate from the one people already disabled writes a claude.ai link into every commit and PR since v2.1.179.
Anthropic says action batching in computer use cut round trips 20 to 40 percent per task for early access testers.
Last year's winning robot needed 21.50 seconds for the same distance, so the record time more than halved in twelve months.
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.