帮助企业运行人工智能模型的热门初创公司 Fireworks AI 周一通知客户发生安全漏洞，其数据被访问，这是该公司在几周内遭遇的第二起已知黑客攻击。
AI, a popular startup that helps companies run artificial intelligence models, notified customers on Monday of a security breach in which their data was accessed, its second known hack in a matter of weeks.
Fireworks 发言人表示，公司正“积极与客户合作处理该事件，包括 Notion、Cursor 等”。根据其网站介绍，Fireworks 拥有超过 1 万名客户，其中包括法律科技公司 Harvey、生产力软件初创公司 Notion 和编程公司 Cursor。Fireworks 在一篇博客文章中表示，一名未经授权的第三方入侵了托管该公司机器的外部云服务商。据一位知情人士透露，此次入侵涉及数万个文件，其中部分包含客户数据。Fireworks 称，该事件发生在 10 月 24 日。
A Fireworks spokesperson said the company is “actively working with our customers to manage the incident, including Notion, Cursor and others.”Fireworks has over 10,000 customers, including the legal tech firm Harvey, productivity software startup Notion and coding company Cursor, according to its website. Fireworks said in a blog post that an unauthorized third-party breached an external cloud provider that hosts the company’s machines. The breach included tens of thousands of files that contained customer data in some cases, according to a person familiar with the matter. This incident happened on Oct. 24, Fireworks said.
10 月初，Fireworks AI 披露了一起不同的安全事件，涉及未经授权使用内部 Fireworks 凭证访问多个客户账户。当时，该初创公司表示正在调查此事，并与一家网络安全公司合作“协助处理该事件”。周一，Fireworks AI 在博文中确认，对 10 月初漏洞的调查发现了对客户账户和账单信息的影响。此外，调查发现，对于有限的一组账户，该漏洞影响了“机密信息、数据集和未完成的模型”。该初创公司表示，证据将 10 月初的事件与一个网络犯罪威胁行为者组织联系起来。
In early October, Fireworks AI disclosed a different security incident that involved unauthorized use of internal Fireworks credentials to get access to a number of customer accounts. At the time, the startup said it was investigating the matter and working with a cybersecurity firm “to assist with the incident.”On Monday, Fireworks AI confirmed in the post that its investigation of the early October breach uncovered impacts to customers’ account and billing information. In addition, the inquiry found that for a limited set of accounts, the breach impacted "secrets, datasets and incomplete models." The startup said evidence links a cybercriminal threat actor group to the early October incident.
Fireworks 在一份声明中表示，在发现涉及未经授权访问其部分系统的安全问题后，公司在网络安全公司 Palo Alto Networks Inc. 的支持下展开调查，并通知了执法部门。“我们非常重视此事，正在直接与客户联系以提供适当支持，”该公司补充道。
After identifying security issues involving unauthorized access to some of its systems, Fireworks launched an investigation with support from the cybersecurity firm Palo Alto Networks Inc. and notified law enforcement, the startup said in a statement. “We take this matter very seriously and are connecting directly with customers to provide appropriate support,” the company added.
Fireworks没有提供有关最新事件责任方的信息。Fireworks的投资方包括英伟达公司和超威半导体公司。知情人士称，这家初创公司7月最近一次估值为175亿美元，目前正在商讨新一轮融资，估值在300亿至400亿美元之间。
Fireworks didn't provide information about who was responsible for the latest incident. Fireworks’ backers include Nvidia Corp. and Advanced Micro Devices Inc. The startup was last valued at $17.5 billion in July and is in discussions for a new round of funding at between a $30 billion and $40 billion valuation, people familiar with the matter said.