Security · 29 October 2026

Cathedral AI Agents Breach Anthropic via Third‑Party Software

Cybersecurity startup Cathedral used AI agents to infiltrate Anthropic’s internal systems through third‑party business software, accessing sales, HR, and IT data during a bug‑bounty program. Anthropic confirmed some data exposure but disputes the depth of the breach, and Cathedral says the incident took less than twelve hours.

Why it matters

Product managers of AI platforms should audit third‑party integrations for credential exposure, as breaches can occur within hours.

For product managers

For your product
What does this mean for your product?
Try it on your product

Get this every morning, written for your product.

Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.