REPORTED DEVELOPMENT
The Washington Post reported Cathedral AI research compromising third-party applications in under twelve hours. Anthropic confirmed limited access to sales, HR and IT information, excluding customer model conversations, source code and model weights. Access was disabled and restored after vendors confirmed fixes.
Affected vendors and CVEs were not publicly identified in the supplied material; fixes were not independently verified.
WHY IT MATTERS TO THE MARKET
Connected SaaS products create data-exposure risks governed by access scope, inventories and vulnerability remediation.