SC Media reports:
Fireworks, an artificial intelligence infrastructure startup, recently disclosed a security breach involving unauthorized access to its development machines after attackers compromised a third-party cloud provider, as first reported by Bleeping Computer.
The incident, which occurred on October 23, allowed threat actors to access customer resource metadata, billing information, and incomplete model weights. This follows an earlier October security event where attackers targeted environment variables to steal API keys for Large Language Model hijacking, or LLM-jacking. In the latest breach, the unauthorized party gained entry through a third-party cloud provider hosting research and development machines.
Read more at SC Media.
