{"slug": "an-ai-start-up-run-by-ex-doge-staffers-got-inside-anthropics-slack-and-hr-in-12", "title": "An AI start-up run by ex-DOGE staffers got inside Anthropic’s Slack and HR systems in under 12 hours", "summary": "AI cybersecurity start-up Cathedral, founded by four former DOGE staffers, says its AI agents reached Anthropic's Slack messages, meeting transcripts and salary records in under 12 hours through Anthropic's bug bounty programme, according to a draft report reviewed by The Washington Post on Monday, October 26. Anthropic disputed the scope, telling the Post that Cathedral reached \"a limited set\" of its sales, HR and IT systems, that its monitoring flagged some activity before Cathedral reported it, and that \"we shut off their access the same day\"; Anthropic said the exposed data included some customer and partner business contacts and basic user account records, but not customer messages, model responses, code or model weights. Cognition chief information security officer Alex Stamos, who reviewed the findings, said \"They found something big here\" and that \"Anthropic could have done a lot better\" in overseeing outside software vendors.", "body_md": "The Anthropic logo. Image: Anthropic\n\nA months-old cybersecurity start-up founded by former DOGE staffers says its AI agents found paths into Anthropic’s Slack messages, meeting transcripts and salary records in less than 12 hours. The start-up, Cathedral, got in through Anthropic’s own programme for outside security researchers, and Anthropic says the hole was much smaller than Cathedral claims, [The Washington Post reported](https://www.washingtonpost.com/technology/2026/10/26/researchers-cybersecurity-start-up-cathedral-got-inside-anthropic/) on Monday, October 26, citing a draft report it reviewed.\n\nCathedral didn’t break Claude itself. It exploited flaws in business software that Anthropic, like many companies, uses for administrative and sales work; the Post withheld the vendors’ names for security reasons.\n\n## What Cathedral says it reached\n\nAccording to the draft, which the Post describes as an early version of a blog post, Cathedral’s AI agents found routes to meeting transcripts, salary and job-offer details, and Slack messages about Anthropic’s most advanced AI models. Cathedral reported the findings to Anthropic earlier this month through the company’s bug bounty programme, which invites outside experts to probe its systems and rewards them for disclosing flaws, and it also told the software vendors.\n\nThe draft calls the result evidence of “a serious gap between the offensive capabilities now emerging and the defenses” and says it “should be a wake-up call for every company in America”. It also says Cathedral’s “data accesses were kept to the absolute minimum in accordance with security research best practices.” A Cathedral spokeswoman declined to comment to the Post.\n\n## Anthropic: “a limited set” of systems\n\nAnthropic’s account is narrower. It told the Post that Cathedral reached “a limited set” of its sales, HR and IT systems, that its own monitoring flagged some of the activity before Cathedral reported it, and that “we shut off their access the same day.”\n\nThe exposed data, Anthropic says, included some customer and partner business contacts and basic user account records. Cathedral could not reach customer messages, model responses, code or “model weights”, the files that make up a trained AI model. “We also have no evidence that anyone exploited these vulnerabilities outside of Cathedral,” a spokesperson said. Anthropic says it switched off the affected software until the vendors fixed it and briefed federal officials.\n\nIt also pushed back on the start-up. Anthropic says Cathedral overstated the “implied national security implications” and didn’t fully follow the bug bounty rules, because it did not disclose all of its activity.\n\n## “Anthropic could have done a lot better”\n\nA senior Trump administration official told the Post the report had circulated inside the government and raised national security concerns. “If a bunch of kids who have just started a company can do this, then potentially, the Chinese aren’t far behind,” the official said.\n\nAlex Stamos, chief information security officer at AI coding start-up Cognition and former director of the Stanford Internet Observatory, reviewed Cathedral’s findings at the Post’s request. “They found something big here,” he said, adding that hooking third-party apps into company systems “is a humongous problem for everybody”. He said the episode showed a gap in how Anthropic oversees its outside software vendors:\n\nThis is a really hard problem, but Anthropic could have done a lot better.\n\nAlex Stamos, chief information security officer, Cognition\n\nCognition uses models from Anthropic and other labs. And when [Jacob Coxon quit](https://madrobot.blog/2026/09/22/anthropic-alignment-lead-10-percent-chance-ai-kills-all-humans/) in September, he wrote on X that racing towards powerful AI was “a hubristic gamble that should not be launched from a private company’s Slack.”\n\n## Who is behind Cathedral\n\nCathedral was founded by four DOGE alumni to sell AI-driven cyber capabilities to the US military, and [raised $160 million at a $1.4 billion valuation](https://www.usnews.com/news/top-news/articles/2026-07-22/exclusive-doge-alumni-launch-military-cyber-startup-with-1-4-billion-valuation) in July, with Andreessen Horowitz and Sequoia leading, Reuters reported. Marc Andreessen and Sequoia’s Shaun Maguire sit on its board, and the senior official said three federal agencies have recently signed contracts with it.\n\nCo-founder Gavin Kliger was the Pentagon’s chief data officer after his time at DOGE, the same Pentagon that [blacklisted Anthropic](https://madrobot.blog/2026/09/25/appeals-court-pentagon-anthropic-supply-chain-risk-ruling/) after it refused to let its models be used for autonomous weapons or mass domestic surveillance, a fight Anthropic is [still taking through the courts](https://madrobot.blog/2026/10/14/anthropic-rehearing-petition-pentagon-supply-chain-risk-dc-circuit/). The Post says Kliger took part in discussions there about how officials would respond if a foreign country got hold of research from a leading AI lab.\n\nIt is a rough month for AI lab security. OpenAI is dealing with an engineer [arrested for hiding a recording device](https://madrobot.blog/2026/10/13/openai-hidden-recording-device-office-engineer-fbi-arrest/) in its office, and on Sunday Anthropic confirmed that one of its own models [pulled Georgia vote-count data](https://madrobot.blog/2026/10/26/claude-georgia-vote-count-data-without-asking/) nobody asked it for.\n\n## Why it matters\n\nThe weak point wasn’t Claude or its weights but ordinary office software, which every AI lab depends on. If AI agents can find those gaps in half a day, the labs guarding the world’s most valuable models need to secure their vendors as tightly as their own code.\n\n*Sources: [The Washington Post](https://www.washingtonpost.com/technology/2026/10/26/researchers-cybersecurity-start-up-cathedral-got-inside-anthropic/); [Jacob Coxon on X](https://x.com/hilbertspaess/status/2097476213942198651); Reuters, via [US News](https://www.usnews.com/news/top-news/articles/2026-07-22/exclusive-doge-alumni-launch-military-cyber-startup-with-1-4-billion-valuation).*", "url": "https://wpnews.pro/news/an-ai-start-up-run-by-ex-doge-staffers-got-inside-anthropics-slack-and-hr-in-12", "canonical_source": "https://madrobot.blog/2026/10/26/ex-doge-cathedral-ai-agents-inside-anthropic-12-hours/", "published_at": "2026-10-26 10:15:00+00:00", "updated_at": "2026-10-26 10:42:53.176911+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "artificial-intelligence"], "entities": ["Cathedral", "Anthropic", "The Washington Post", "Alex Stamos", "Cognition", "DOGE", "Claude", "Stanford Internet Observatory"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/an-ai-start-up-run-by-ex-doge-staffers-got-inside-anthropics-slack-and-hr-in-12", "markdown": "https://wpnews.pro/news/an-ai-start-up-run-by-ex-doge-staffers-got-inside-anthropics-slack-and-hr-in-12.md", "text": "https://wpnews.pro/news/an-ai-start-up-run-by-ex-doge-staffers-got-inside-anthropics-slack-and-hr-in-12.txt", "jsonld": "https://wpnews.pro/news/an-ai-start-up-run-by-ex-doge-staffers-got-inside-anthropics-slack-and-hr-in-12.jsonld"}}