Record / incident · Unknown · 2026-09-17

Reported cyber incident at an organization

incidentconfidence 25anonymized

A skilled attacker exploited a remote code execution vulnerability in Marimo notebook software to gain initial access and pivoted to an SSH bastion host in eight seconds, demonstrating rapid post-compromise lateral movement.

Organization
Not named. We name an organization only with a primary source.
Country · sector
Unknown
Dates
occurred – · disclosed 2026-09-15 · published 2026-09-17
Tags
news

Sources

Defenses for this class of incident

all categories

An incident sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.

HeimWall Operator
Observability & governance
United States · est. 2025
NetworkObservability & governanceAI code security
United States · est. 2023 · raised $4M
Observability & governanceAI identityAI code security
United States · est. 2022 · raised $17.5M
Observability & governance
United States · est. 2019 · raised $5.35M
Observability & governance
France · est. 2025

Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 452 companies in the directory.

Back to the record

Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.