CybersecurityUpdated Yesterday
Fireworks says attackers used a cloud breach to reach its development machines
Fireworks said a third-party cloud provider hosting its research-and-development machines experienced an incident on October 23. The next day, an unauthorized party used it to reach Fireworks development machines, and the company said the resulting activity led to additional customer-data impact. That included Fireworks resource metadata and billing details such as addresses, invoice and payment history, account balances, and credit usage. Incomplete model weights and datasets were affected for some customers. Fireworks said payment card numbers were not accessible because it does not store them. It detected the activity on October 24 and said it had found no further successful unauthorized access by the threat actor on its customer platform as of October 25.
Coverage started Yesterday