AI agents hacked Anthropic, maker of arguably the most capable AI models for cyberdefense

Cybersecurity startup Cathedral used AI agents to infiltrate Anthropic's internal systems through third-party business software, exploiting the AI lab's own bug bounty program to expose major vulnerabilities. Cathedral reported its access to internal data and messaging systems in a draft report reviewed by The Washington Post. The startup, founded by former employees of DOGE, the U.S. government efficiency agency, sells AI-powered security tools to government agencies and businesses. Cathedral's researchers got in through external admin and sales programs. According to their report, AI agents running advanced models found paths to meeting transcripts, salary data, job postings, and Slack messages in under twelve hours.

First reported by The Decoder. This page is a short excerpt; the full text is theirs.