Overview
Severity: CRITICAL | Affected: CognitionAI | Category: breach
Emerging AI leader CognitionAI confirmed a significant security breach today, resulting in the exfiltration of core intellectual property. Attackers, believed to be a sophisticated state-sponsored group, exploited a zero-day vulnerability in a widely used MLOps orchestration tool to gain persistent access to the company's cloud environment. The stolen assets reportedly include the complete model weights for their flagship generative model, 'Cortex-5', along with several terabytes of the proprietary, curated dataset used for its training. The incident has sent shockwaves through the industry, highlighting the immense value of AI models as targets for industrial espionage. Security experts are concerned that the leaked weights could be used to replicate the model or be fine-tuned for malicious purposes, such as creating highly effective disinformation campaigns. CognitionAI is working with federal authorities and has launched a full-scale investigation.