Cathedral used AI agents to breach Anthropic through third-party business software
Cathedral reported using AI agents to access Anthropic's internal systems through third-party business software. Anthropic confirmed limited access to sales, human resources, and IT systems, including some customer and partner contact information, but said Claude chats, source code, and model weights were never exposed. The companies dispute the attack's duration, the extent of access, and compliance with bug bounty rules; Anthropic said it closed the affected access points the same day it discovered the breach.

Why it matters
The incident highlights how connected business software can expose sensitive internal systems, making third-party integrations a consequential part of an AI company's security perimeter.










