Firewall Security Company India Complete Firewall Security Solutions Provider Company in India
Fireworks AI reports new breach after cloud provider hack
https://etimg.etb2bimg.com/thumb/msid-135723444,imgsize-1866197,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/fireworks-ai-reports-new-breach-after-cloud-provider-hack.jpg
AI infrastructure startup Fireworks AI has disclosed a new security breach, with attackers accessing its development machines after breaching a third-party cloud provider, the company announced.
The incident, detected on October 24, involved threat actors running an unauthorized workload that impacted customer data. This data included resource metadata, billing information, and incomplete model weights and datasets for some customers.
Fireworks stated that customer payment card numbers were not accessed as the company does not store them. This marks the second security incident for Fireworks AI, following an early October event linked to “LLMJacking,” a financially motivated cybercriminal threat.
Incident response and context
Fireworks detected the activity on October 24 and initiated immediate remediation measures. The company has since revoked and replaced compromised internal credentials and service accounts.
It also restricted unauthorized network pathways, isolated affected systems, and tightened access to data storage and analytics systems. Fireworks is collaborating with Palo Alto Networks’ Unit 42 incident response division to investigate the full scope and impact.
Researchers at Google’s Threat Intelligence Group (GTIG) and Mandiant recently reported that large language model hijacking (LLMjacking) attacks are causing significant costs for compromised organizations. Cloud AI charges have reached up to $1 million due to fraudulent calls using stolen API keys.
