Mission InfoSec Brief
AI agents got into Anthropic
AI agents got into Anthropic's business systems
AI agents from Cathedral, a startup founded by former DOGE staffers, found paths into Anthropic's sales, HR, and IT systems through third-party software in under 12 hours.
What to do
- First, I'd list the third-party sales, HR, and IT tools that hold your company's data.
- Then, I'd review each vendor's contractual reporting requirements, and hold those tools to your standard for critical systems.
- Finally, I'd update your bug bounty rules for researchers who test with AI agents.
Board questions
- I saw the Anthropic story in the Post. Could an AI agent reach our salary data through a vendor?
- If a vendor's flaw exposed employee salary data, what would we owe employees and regulators?
Cloudflare's AI service mixed up customer data
Cloudflare says a bug in Workers AI sent 155 responses with other customers' prompts and partial answers on the GLM-5.3 model between August 27 and September 9.
What to do
- First, if you use Workers AI, I'd ask Cloudflare if your requests were among the 155.
- Then, I'd ask each AI vendor how they keep customers' data segregated.
- Finally, I'd put a notice period for data leaks into your AI vendor contracts.
Board questions
- If our AI vendor sent our prompts to another company, how would we learn about it?
- Which customer data do we send to outside AI services today, and who approved it?
A cyberattack turns away New Mexico ambulances
A cyberattack forces the University of New Mexico's hospital to divert ambulances and suspend surgeries and clinic appointments.
What to do
- First, I'd confirm who can authorize a decision to shut down systems.
- Then, I'd run a tabletop exercise for the operations that will impact your customers.
- Finally, I'd confirm staff can get that shutdown order even if company email is down.
Board questions
- I saw the New Mexico hospital story from AP. How long could we serve customers with our systems offline?
- Does our cyber insurance cover the revenue we lose while we turn away business due to an incident?
Quick hits
-
NIST finalized its plan for the move to quantum-resistant encryption, and the most important federal systems now face 2030 and 2031 deadlines.
-
CISA added a flaw in Brotli, a compression library inside Node.js and many cloud services, to its exploited list, but shared no attack details.
-
The Federal Election Commission took its filing system offline Monday night after an attempted breach, which delays campaign spending reports before the midterms.