https://news.ycombinator.com/item?id=50241543
MSN access: https://www.msn.com/en-us/news/other/it-took-just-12-hours-f...
Why does it matter if Cathedral follows some bug bounty rules? Black hats don't follow rules.
And IMO the citation about acting irresponsible when a company "relies on conventional business software" is taken out of context and is about AI safety, not a vulnerability in Slack.
My popcorn is ready, seems we're up for an interesting week or several.
> According to a draft report reviewed by The Washington Post, Cathedral used AI agents to find weaknesses in business software used by Anthropic for administrative and sales tasks. The researchers found ways to access internal data, including meeting transcripts and Slack messages, after running their agents for less than 12 hours.
Simulacra•55m ago
bliteben•22m ago
refactor_master•12m ago
gambiting•3m ago