In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak

According to SecurityWeek, citing a draft report reviewed by the Washington Post, Cathedral, a cybersecurity startup founded by former DOGE staffers, says its AI agents found ways into Anthropic's internal systems in less than 12 hours[1].SecurityWeek reports that Anthropic says "only a limited set of sales, HR and IT systems was reached"[1] and that it cut off the startup's access the same day. SecurityWeek adds that Anthropic accuses Cathedral of breaking the bounty program's rules by not disclosing all of its activity.[1]SecurityWeek, citing Ars Technica, reports that a critical 16-year-old buffer overflow (CVE-2026-97631) in TianoCore EDK II[1] affects most servers worldwide. According to SecurityWeek, only machines that use network boot are exposed[1].SecurityWeek reports that Cloudflare says between August 27 and September 9, 155 responses from the GLM 5.3 model on its Workers AI platform contained data from other customers'[1] sessions. Threat Radar reports that Cloudflare recommends SGLang operators update to version 0.5.22 or later.[2]