Fireworks AI披露了10月的另一次网络攻击，以及涉及账单记录、数据集和不完整模型权重的更广泛客户数据泄露。
Fireworks AI has disclosed another cyberattack in October and a wider customer data exposure involving billing records, datasets, and incomplete model weights.
该公司允许客户训练和运行AI模型，称其第三方云服务提供商托管的研发机器于10月23日遭到入侵。
The company, which lets customers train and run AI models, said a third-party cloud provider hosting its research and development machines was compromised on October 23.
攻击者次日利用该访问权限进入Fireworks开发系统并运行未经授权的工作负载。
Attackers used that access the following day to reach Fireworks development systems and run an unauthorized workload.
Fireworks怀疑与从事LLMJacking的以经济利益为动机的犯罪分子有关联，LLMJacking是指通过非法网关出售未经授权的AI模型访问权限。
Fireworks suspects links to financially motivated criminals involved in LLMJacking – selling unauthorized access to AI models through illicit gateways.
Fireworks将受影响的数据分为三类：资源元数据：资源标识符、显示名称、描述、创建时间等 账单信息：账单和送货地址、发票和付款记录、账户余额以及信用额度使用情况。
Fireworks grouped the affected data into three categories: Resource metadata: Resource identifiers, display names, descriptions, creation times, and more Billing information: Billing and shipping addresses, invoice and payment histories, account balances, and credit usages.
支付卡号未保存，因此未受影响 模型权重和数据集：Fireworks表示，部分客户的部分不完整模型权重和数据集被访问。
Payment card numbers are not saved and therefore unaffected Model weights and datasets: For certain customers, a subset of incomplete model weights and datasets were accessed, Fireworks said Lin Qiao, Fireworks co-founder and CEO, said the apparent motive was not stealing model weights in response to concerns raised by Cantina Security CEO Hari Mulackal.
Fireworks联合创始人兼首席执行官林巧表示，针对Cantina Security首席执行官Hari Mulackal提出的担忧，明显动机并非窃取模型权重。“从我们看到的情况来看，攻击者并非冲着权重而来，”林巧说。“大多数下载都是部分下载，并且已停止。”
"From what we see attackers are not after weights," said Qiao. "Most downloads were partial and stopped."
Render创始人兼首席执行官Anurag Goel分享了一条来自Notion的通知，警告称通过Fireworks事件，与其AI助手的一些聊天可能已被泄露。
Render founder and CEO Anurag Goel shared a notification from Notion warning that some chats with its AI assistant may have been exposed through the Fireworks incident.
“经过Notion安全团队的调查，我们确定，您的工作区Render是其中之一，”
"Following an investigation by the Notion security team, we have determined that your workspace, Render, was among the