[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← AI · markdown

official (Notion security advisory, Nov 9, updated Nov 10, 2026); Notion says its own systems were not breached

Notion: the Fireworks AI breach exposed Notion AI chat transcripts used for its Insights feature, in under 1% of workspaces

  • If you were notified: review the affected data in your workspace as instructed, treat it as exposed, and rotate any passwords, API keys or other credentials pasted into Notion AI during the incident window.
  • If you weren't: Notion says no action is needed now and it will contact workspaces it later finds affected.
  • Lesson: Notion says Fireworks had committed to zero data retention for Notion data (per BleepingComputer). An AI subprocessor that runs analytics on stored chats holds a copy of your prompts; include it in vendor reviews and data-retention questions.
  • Background: our earlier item on Fireworks's own Nov 9 incident update.

Sources: Notion security advisory: Fireworks AI incident (first published Nov 9, updated Nov 10, 2026) · BleepingComputer: Notion says Fireworks breach exposed customer AI chat transcripts (Nov 11, 2026)