AI startup Cathedral, founded by former DOGE members, says it breached Anthropic's internal systems within 12 hours

Cathedral, an AI startup founded by former DOGE members, disclosed to Anthropic that its researchers exploited a vulnerability in third-party commercial software to enter Anthropic's internal systems in under 12 hours. According to a draft report reviewed by The Washington Post, the testing was conducted by running AI agents under Anthropic's bug bounty program, and the accessed data involved meeting notes, salary and offer letter details, and Slack chat logs discussing advanced AI models. Anthropic confirmed that the researchers accessed limited portions of its sales, HR and IT systems, that it has closed the exposed access paths and notified federal officials, and that customer messages, model responses, AI system code and model weights were not touched. The two sides disagree on characterization: Anthropic accused Cathedral of exaggerating the national security impact and of not fully complying with the bounty program's rules; Cognition chief information security officer Alex Stamos believes the researchers did find a significant issue.