Making Tech Headlines · Page 5
Fireworks Finds a Side Entrance in Someone Else's Cloud
· New York time
AI infrastructure startup Fireworks has disclosed a security breach in which attackers accessed its development machines after breaching a third-party cloud provider. The reported path into the company's environment ran through a service outside Fireworks itself. Development machines are part of the environment where software is built and maintained, making access to them a serious concern. The report identifies that access and its route; it does not establish that every customer system was accessed. The incident nevertheless shows how a company can inherit risk from infrastructure it relies on but does not entirely control. Cloud services let organizations use computing resources without owning every layer of the underlying machinery. That can make operations easier to organize, while security responsibilities span more than one company. A provider's systems and a customer's systems may appear as separate boxes on a diagram, but an intruder's route can cross the line between them. For an AI infrastructure company, the tools used to build and maintain software are themselves an important part of the business. The cloud is often depicted as a neat abstraction floating above a slide. Attackers appear more interested in the very real doors underneath it.
Read this story in the full newspaper →Satire. Not factual reporting. Read the original reporting from the linked publishers.