Notion has begun notifying customers after a data breach at Fireworks AI, a third-party provider, led to unauthorised access of Notion AI chat transcripts. Less than 1% of workspaces were affected.
Symantec principal analyst Dick O'Brien states that AI is accelerating vulnerability exploitation, making traditional patching insufficient. Organisations must now prioritise post-compromise mitigation.
Cloud hosting provider Railway has revealed a breach in its infrastructure that allowed attackers to steal customer authentication secrets, resulting in approximately $740,000 in fraudulent AI usage.
Autonomous AI coding agents, including Claude Code, have inadvertently saved thousands of files containing credentials and other sensitive data to public GitHub repositories. This creates significant security vulnerabilities for organisations relying on these tools.