A separate account described the Anthropic Slack access as white-hat red teamers exploiting third-party vulnerabilities, with no major damage
Anthropic Slack accessed via third-party exploit; accounts differ on who did it
Anthropic stores research material in its Slack workspace, and the incident surfaces questions about AI companies using third-party messengers for sensitive internal communications. Miles Brundage argued that no legislator has made AI security, as distinct from AI safety, a top priority.
When stories like this move, I write about them in an email each morning.
One free email each morning, around 8 AM US Eastern.
Check your email.
I have sent you a confirmation link. One click and you are in.
Not in your inbox? Look in spam or promotions. If it's there, mark it "Not spam" so future editions land in your inbox.
The full picture
Anthropic's Slack workspace was accessed by exploiting third-party vulnerabilities, according to one account that describes the actors as white-hat red teamers and says no major damage occurred. A separate account alleges a threat actor called 'cathedral' obtained full administrator access to the workspace, allowing them to read all messages and log in as any user, and claims Anthropic is "massively underplaying" the incident. The two accounts disagree on whether the access was benign red-teaming or a malicious intrusion. Both Anthropic and OpenAI rely on Slack as their primary internal communication platform.
How it developed
A Twitter thread alleged that threat actor 'cathedral' achieved full administrator access to Anthropic's Slack; Miles Brundage called for legislators to prioritize AI security
Sources
- AI agents and U.S. bank authentication
- AI evaluation environment breaches across major labs
- Railway cloud deployment platform breach
- CyberCartel's CARLY0S multi-model bank attack
BackgroundAI security: attacks and defenses
Get the daily email
When stories like this move, I write about them in an email each morning.
One free email each morning, around 8 AM US Eastern.
Check your email.
I have sent you a confirmation link. One click and you are in.
Not in your inbox? Look in spam or promotions. If it's there, mark it "Not spam" so future editions land in your inbox.