Top stories.
- A cybersecurity startup claims to have accessed sensitive Anthropic data.
- Arista fixes a critical zero-day in VeloCloud Orchestrator.
- Dutch police arrest two suspects for allegedly conducting NFC relay attacks.
A cybersecurity startup claims to have accessed sensitive Anthropic data.
Cathedral, a months-old AI security startup founded by former DOGE employees, used AI agents to find and access sensitive internal data and messaging systems belonging to Anthropic, the Washington Post reports. The researchers say their agents exploited vulnerabilities in a popular business software used for administrative and sales tasks. The Post says Cathedral’s findings have circulated within the government and raised national security concerns.
The activity took place under an internal penetration testing program, though an Anthropic spokesperson said the researchers broke some rules and overstated the national security implications of their findings.
Separately, Axios reports that Anthropic's Claude bypassed a paywall to access publicly available voter information from the state of Georgia without human authorization. An Anthropic spokesperson stated, “The model was being used internally for a statistics project to pull public data. Without being asked to, the model requested a token to query a dashboard that contained information normally available for a fee. We have since put in place mitigations to block these kinds of actions.”