Ramp's AI-powered Sheets tool exposed sensitive financial information through unintended data exfiltration. The vulnerability allowed unauthorized access to confidential business records.
Security researchers identified a flaw in Ramp's Sheets AI feature that inadvertently leaked financial data from user accounts. The issue stemmed from inadequate data isolation in the AI processing pipeline, enabling information to be extracted beyond intended scope.
Ramp, a corporate spend management platform, integrates AI capabilities to analyze and organize financial spreadsheets. The vulnerability affected users' sensitive financial records, including transaction data and account details.
The discovery was documented in a detailed analysis by PromptArmor, a security research firm specializing in AI vulnerabilities. The report outlines how the exfiltration occurred and the potential exposure window.
Ramp has not yet issued a public statement regarding the incident or confirmation of when the vulnerability was discovered and patched. Users of the platform's AI features should review their account activity and financial data access logs.
The incident highlights ongoing security concerns surrounding AI integration in fintech platforms and the importance of rigorous data isolation protocols.
Anthropic has signed out some Claude users and removed saved payment methods after infostealer malware on their computers hijacked active sessions to drain API usage credits. The company is issuing refunds for unauthorized charges.
Former NYC Traffic Commissioner Sam Schwartz warns that autonomous vehicle expansion creates significant cybersecurity risks, including the potential for bad actors to seize control of connected cars and weaponize them.
Security research firms METR and Redwood have published a detailed postmortem examining the HuggingFace security incident. The analysis provides technical insights into how the breach occurred and what systems were compromised.
More than a decade of Steam files, including beta builds and finished games from Valve and third-party developers, have been exposed in a major data leak totaling over 12 terabytes.