Breach at AI provider Fireworks exposes some Notion AI chat transcripts
Notion disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed Notion AI chat transcripts in fewer than 1% of workspaces. It is Fireworks' second data breach in two months.
What you type into AI features can sit with third-party providers, so companies must check the security of every vendor in their AI supply chain.
aii.news picks and summarizes stories from trusted news sources with the help of AI. Every story links to the original reporting. How we work.
Keep reading
-
FBI says North Korean hackers stole over $400 million in crypto using deepfake video calls
The FBI says hackers tied to North Korea stole more than $400 million in cryptocurrency over 18 months in a social engineering scheme codenamed FaceStealer that used deepfake video calls. The finding was part of a coordinated set of US government actions.
Why it mattersA familiar face on a video call is no longer proof of identity, so crypto firms and finance teams need extra checks before moving money.
-
Feedzai adds tools to help banks spot AI agents accessing customer accounts
Financial crime prevention firm Feedzai expanded its Digital Trust product so banks can detect when AI agents, rather than people, are accessing customer accounts.
Why it mattersAs customers and fraudsters both start using AI agents, banks need ways to tell legitimate automated access from abuse.
-
Attacker switched to AI-generated scripts to move through a US retailer's network in minutes
When typed commands failed to break into a US retailer, the attacker used AI-generated scripts instead. This let them move across the network within minutes.
Why it mattersAI shrinks the time defenders have to detect and stop an intruder, so retailers need faster monitoring and response.
-
OpenAI rolls out ChatGPT Wallet so AI agents can buy things without seeing your card number
OpenAI began rolling out ChatGPT Wallet, which lets its agents pay for purchases using a stand-in card number, so card details are not shared with the agent or the merchant. It was built with American Express, Mastercard and Visa, starts with US Pro subscribers, and requires biometric approval for each purchase.
Why it mattersLetting AI agents spend money for you is now a real product, so shoppers and merchants need to understand how approvals, tokenized cards and agent blocking will work.
-
Chinese-speaking hackers used open-source AI pentest tool to breach 10 organizations
Palo Alto Networks Unit 42 says attackers paired the open-source AI pentesting framework Cairn with Chinese models GLM and DeepSeek to run 25 operations against at least 19 organizations in August and September 2026. They gained access or took data at 10 targets, mostly in semiconductors, advanced manufacturing and defense, often after giving little more than a domain name and a one-line goal.
Why it mattersAutonomous AI attack tools are now being used in real campaigns, so defenders must assume attacks can run at machine speed with little human effort.
