AI startup hacks Anthropic in 12 hours, gains access to employee details and internal messages

A cybersecurity startup called Cathedral gained access to sensitive internal systems at Anthropic in less than 12 hours, exposing employee information, salary details, job offers and internal messages discussing the company's advanced AI models. The incident was discovered during a security test conducted under Anthropic's programme for outside researchers to identify vulnerabilities. According to a draft report reviewed by The Washington Post, Cathedral used AI agents to find weaknesses in business software used by Anthropic for administrative and sales tasks. The researchers found ways to access internal data, including meeting transcripts and Slack messages, after running their agents for less than 12 hours. Cathedral was founded by former members of the US Department of Government Efficiency (DOGE) and develops AI-powered cybersecurity tools for government agencies and corporate clients.

First reported by India Today. This page is a short excerpt; the full text is theirs.