Fireworks AI confirmed a second intrusion in less than three weeks, following an earlier breach detected on October 6. On October 24, attackers compromised a third-party cloud provider hosting Fireworks’ development machines and gained access to customer data, including billing addresses, invoice histories, account balances, resource metadata and, for some accounts, datasets, secrets and incomplete model weights. Notion disconnected from Fireworks, deleted the data stored with the provider and disabled the Insights feature, which was affected in less than 1% of its workspaces. It also stopped using Fireworks for open-weight model inference. Fireworks is investigating with Palo Alto Networks’ Unit 42 and is working with affected customers, including Notion, Cursor and Harvey.
Source: Read the original article
