[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← AI · markdown

official (Fireworks AI incident update, Nov 9, 2026; original bulletin Oct 9-10); investigation ongoing with Palo Alto Networks Unit 42

Fireworks AI widens its October breach: billing data, and for some customers secrets, datasets and incomplete model weights; it ties the actor to LLMjacking

  • Not affected, per Fireworks: inference, Training SDK and Nexus, which keep no data by default.
  • Service changes: self-serve dataset uploads and downloads for Batch Inference and dataset-based training are disabled during the investigation.
  • If you're a customer: follow your account-specific notice; rotate third-party credentials with the providers that issued them, since deleting a stored secret doesn't invalidate it.
  • Context: this fits the wave of AI developer-platform intrusions for LLM access covered in our Oct 30 Wiz "Black October" and Northflank items.

Sources: Fireworks AI: Update on October 2026 security incident (Nov 9, 2026) · Fireworks AI: October 2026 security incident bulletin (Oct 9-10, 2026)