Press Enter to search · ESC to close

Crypto AI × Crypto

Cathedral says its AI agent breached Anthropic systems in under 12 hours

AI cybersecurity startup Cathedral, founded by former U.S. DOGE members, said its AI agent gained access to Anthropic’s internal systems in under 12 hours, obtaining meeting notes, compensation and hiring information and Slack messages. Anthropic confirmed access to some sales, HR and IT systems, including customer and partner business contact information and some basic user account records, but said Claude user conversations, source code and model weights were not involved. The test ran under Anthropic’s bug bounty program via a third-party commercial software flaw; Anthropic accused Cathedral of incomplete disclosure in violation of program rules.

Original source

AI take

The disclosure fight may matter more than the breach itself: Cathedral frames a sub-12-hour compromise as a demonstration of agentic capability, while Anthropic's objection centers on bug bounty disclosure norms rather than the access obtained. For AI developers and enterprise buyers, the episode suggests agent-driven intrusion is being marketed as a security product, blurring the line between vendor pitch and vulnerability research. Whether such agentic attacks become a standard testing method, and whether bounty programs tighten disclosure rules in response, is the open question.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback