Skip to content
NewA calmer, faster ZeroHour
StoryData breachhigh

AI agents reached Anthropic business systems via third-party software

2 sources · 2 articlesFirst reported Updated ()1
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Cathedral’s AI agents reached limited Anthropic sales, HR, and IT data; Claude prompts, code, and weights were not accessed.

Cybersecurity startup Cathedral says AI agents entered Anthropic through unnamed third-party admin and sales software during an outside-researcher bug-bounty engagement. Anthropic confirmed limited access to sales, HR, and IT systems with some customer and partner contacts—not Claude prompts, source code, or model weights—and said access ended the same day, with software restored only after vendor fixes. It reported no evidence outsiders used the flaws and, The Decoder says, notified US authorities. The Decoder reports disputes: Cathedral says under twelve hours; Anthropic says probing lasted days and it patched a second flaw. Will Depue claims full Slack admin access; Logan Graham disputes that.

Key facts
  • Reached data included transcripts, salaries, job offers, and Slack discussion of advanced models.
  • Cathedral said it limited access and withheld some in-system activity under bounty rules.
  • Vendor names and the exact flaws were withheld.
  • Reuters, cited by Cyber Security News, said Cathedral raised $160 million at $1.4 billion.
  • Anthropic said it found and patched a second flaw itself.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • Cyber Security NewsAdds the funding figure, bounty non-disclosure, and no outside use.
  • The DecoderAdds duration, second-flaw, and Slack disputes plus US notice.
Products
Slack
Victims
Anthropic
Organizations
Cathedral
Countries
United States
AI models
Claude

Coverage

oldest first · one row per article · UTC
  1. · 4d ago Cyber Security NewsFirst report

    Cathedral AI agents reached Anthropic business systems in authorized test

    Agents used unnamed third-party software to reach sales, HR, and IT data; prompts, source code, and model weights were not accessed.

  2. · 2d ago The Decoder

    AI agents accessed Anthropic systems via third-party software

    Anthropic says sales, HR, and IT data were exposed, but Claude chats, source code, and weights were not.