AI startup hacks Anthropic, gains access to employee details, internal messages

Posted by healsdata 1 day ago

Counter74Comment18OpenOriginal

Comments

Comment by karussell 1 day ago

Comment by uxhacker 1 day ago

Weird how the original story only got 12 points five days ago, and 3 comments but todays story 22 whilst I am writing this.

Comment by Ylpertnodi 1 day ago

Weekend?

Comment by halJordan 1 day ago

Not everything is a conspiracy

Comment by nvme0n1p1 1 day ago

https://news.ycombinator.com/submitted?id=uxhacker

All politics. I'm afraid it's too late for him :(

Comment by karussell 1 day ago

A few aspects of this article are strange or not well expressed.

Why does it matter if Cathedral follows some bug bounty rules? Black hats don't follow rules.

And IMO the citation about acting irresponsible when a company "relies on conventional business software" is taken out of context and is about AI safety, not a vulnerability in Slack.

Comment by ArcHound 1 day ago

That's not something you want to see before IPO. Wonder if it'll have an effect on the potential investors and thus the stock price. Also wonder if it then would have left-over effect on other AI stocks.

My popcorn is ready, seems we're up for an interesting week or several.

Comment by cassianoleal 1 day ago

The headline is wrong. It should read:

> AI startup's agent goes rogue, hacks Anthropic, ...

Comment by trio8453 1 day ago

Hacker News really living up to its name these past few days.

Comment by r3trohack3r 1 day ago

I don’t think that’s the definition of “hacker” in the sites name https://www.catb.org/~esr/faqs/hacker-howto.html

Comment by xivzgrev 1 day ago

I'm concerned someone will hack Anthropic and release messages tied to people's identity, since you need a non-voip phone number to sign up

Some people trust AI with a lot - financial, health, relationships - and it would all be out there

I also expect open AI to be hacked at some point, but at least with them you can use a throwaway email

And with Gemini, google has had some incidents over the years but given their size and length of existence it's been surprisingly small / secure.

But anthropic is a typical grow-fast startup, with security likely as a secondary concern. Waiting for the shoe to drop.

Comment by neuronexmachina 1 day ago

I'm curious which software was the entry point:

> According to a draft report reviewed by The Washington Post, Cathedral used AI agents to find weaknesses in business software used by Anthropic for administrative and sales tasks. The researchers found ways to access internal data, including meeting transcripts and Slack messages, after running their agents for less than 12 hours.

Comment by Simulacra 1 day ago

It's like the hacker that hacks into a company to schedule himself for a job interview

Comment by bliteben 1 day ago

Why wouldn't he just bribe employees like everyone else does?

Comment by refactor_master 1 day ago

Bribery is illegal. This? This is just agents doing agent things, and who can blame them. Agents will be agents.

Comment by gambiting 1 day ago

Bribing employees of private companies as a private person is not illegal(well, maybe it is where you live but I can't know the law everywhere).

Comment by ramon156 1 day ago

private to private bribery is illegal, it doesnt matter if you're private or not. this is true in most EU countries, as well as the US, so I'm unsure where you're from

Comment by alcomatt 1 day ago

but corporate bribery (lobbying) is absolutely legal...

Comment by kalenkilgore 1 day ago

[dead]