Fireworks AI got hacked despite SOC 2 and ISO certs — 'security theater' debate
DesireeCachette · x · 2026-11-10
Chris Ciaba points out Fireworks AI was hacked while holding SOC 2 and ISO 27001/27701/42001 certifications, arguing these audits — costing tens to hundreds of thousands per year — have become 'security theater' that only proves you could pay a $12,000 compliance shop. Quoter Desiree Cachette draws a parallel to insurance: she paid $100,000 in premiums for Fund I coverage that proved worthless, even harmful when an attacker assumed the insurer would pay $2M. Both call for a security framework that actually works, especially in the AI-driven cyber threat era.
More from Safety
- USB+ open-sources a trust layer for inspecting agent skills and MCP servers before install — peepsick · 2026-11-10
- MCP server security hinged on $HOME — and the agent controls the environment — Relevant_Mousse_9117 · 2026-11-10
- Android's Accessibility permission can let apps read and interact with your screen — Aiden_Tech_Ai · 2026-11-10
- Microsoft patents deletable user proxies for privacy-preserving LLM personalization — SchoeneggerPhil · 2026-11-10
- UK man arrested after Facebook flags AI-generated photo he sent wife on Messenger — neurocy · 2026-11-10
- Retro-Terminal 'Dream Man' Slides Steal the Show at WIPO's IP and AI Forum — technollama · 2026-11-10