From Decrypt · By Jose Antonio Lanz
In brief
Cathedral says AI agents found paths into Anthropic's internal systems in less than 12 hours by exploiting weaknesses in third-party administrative and sales software.
Anthropic confirmed access to a limited set of sales, HR and IT systems, but says customer conversations, Claude responses, source code and model weights were not reached.
Anthropic says Cathedral overstated the national security implications and did not disclose all of its testing; Cathedral says it kept data access to the absolute minimum.
Researchers at a cybersecurity startup said AI agents found paths into Anthropic's business systems in less than 12 hours, according to a Washington Post report published Monday.
The way in was not Claude, Anthropic's AI assistant, but third-party administrative and sales software, the kind of programs companies use to track customers and manage staff. Many other companies use the same software.
Myriad: Which company will have the best AI model? Click to make your prediction.
The startup, Cathedral, was founded months ago by four former staffers of the Department of Government Efficiency, the Donald Trump administration's cost-cutting team better known as DOGE. The startup raised $160 million at a $1.4 billion valuation in July.
Cathedral tested Anthropic through a program that works like a bug bounty, in which a company rewards outside experts for reporting flaws instead of exploiting them. Its AI agents, which carry out multi-step tasks without a person approving each move, found routes to meeting transcripts, salary and job-offer details, and Slack messages about Anthropic's advanced models, per a draft of its report.
“Our monitoring flagged some of Cathedral's activity before they reported it to us,” Anthropic told the Washington Post, “we shut off their access the same day.” The company says the researchers reached “a limited set” of sales, HR, and IT systems holding business contact details and basic user account records.
BitcoinBTC · USD$80,012−2.45%Oct 19Oct 21Oct 23Oct 25Oct 26$84.8k$83.1k$81.3k$79.6k24h HighHigh$80,68024h LowLow$79,332VolVol$1.2B→Buy Bitcoin with USDTPowered by JupiterPrice data by CoinGeckoCoinGeckoMore Bitcoin news and projections →Customer conversations with Claude, source code and model weights, the billions of numbers that make up the trained AI, were not accessed, Anthropic said. It has no evidence that anyone other than Cathedral exploited the flaws.
Anthropic said Cathedral overstated the national security implications and did not fully follow the program's rules because it did not disclose all of its activity. Cathedral's draft report said “data accesses were kept to the absolute minimum in accordance with security research best practices.”