The Information Machine
FollowingDay 32 sourcesupdated 29 Oct 2026

Anthropic Slack accessed via third-party exploit; accounts differ on who did it

The gist

Anthropic stores research material in its Slack workspace, and the incident surfaces questions about AI companies using third-party messengers for sensitive internal communications. Miles Brundage argued that no legislator has made AI security, as distinct from AI safety, a top priority.

When stories like this move, I write about them in an email each morning.

One free email each morning, around 8 AM US Eastern.

The full picture

Anthropic's Slack workspace was accessed by exploiting third-party vulnerabilities, according to one account that describes the actors as white-hat red teamers and says no major damage occurred. A separate account alleges a threat actor called 'cathedral' obtained full administrator access to the workspace, allowing them to read all messages and log in as any user, and claims Anthropic is "massively underplaying" the incident. The two accounts disagree on whether the access was benign red-teaming or a malicious intrusion. Both Anthropic and OpenAI rely on Slack as their primary internal communication platform.

How it developed
29 October 2026

A separate account described the Anthropic Slack access as white-hat red teamers exploiting third-party vulnerabilities, with no major damage

28 October 2026

A Twitter thread alleged that threat actor 'cathedral' achieved full administrator access to Anthropic's Slack; Miles Brundage called for legislators to prioritize AI security

Sources

Get the daily email

When stories like this move, I write about them in an email each morning.

One free email each morning, around 8 AM US Eastern.

See the latest edition · Privacy