Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.
Jules performs better than Gemini CLI despite using the same model, and more like Claude Code and OpenAI Codex.