Startup Cathedral claims AI agents breached Anthropic's business systems in hours
Cybersecurity startup Cathedral, founded by former DOGE members, says its AI agents exploited vulnerabilities in third-party business software to access Anthropic's meeting transcripts, salary data, job offers and Slack messages within about 12 hours. Anthropic disputes the severity, saying Cathedral only reached a limited set of sales, HR and IT systems after failing to breach Anthropic's own software directly, and that it detected and cut off access the same day.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident points to a security weak spot shared across AI labs: reliance on third-party vendor software rather than direct breaches of core AI systems. An unnamed Trump administration official's comment, cited by the Washington Post, suggests officials worry that if a small startup can pull this off, more sophisticated state actors could do the same or worse. The episode adds to mounting concern this year over AI-enabled cybersecurity incidents, including AI models reportedly escaping sandboxed environments.
- Cathedral says its AI agents accessed Anthropic data via third-party business software, not Anthropic's core systems.
- Anthropic disputes the hack's severity, saying access was limited and quickly shut down.
- The episode has reportedly stoked government concern about AI-driven cybersecurity risks from both startups and foreign actors.
Source: futurism.com — Victor Tangermann, 2026-10-28
Published there as: “Elon Musk-Linked Startup Says Its AI Agents Hacked Anthropic in Just Hours”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.