# Regulatory updates

### Asana AI leak

June 18, 2025

Asana's new AI feature, MCP, accidentally exposed customer data across organizations due to a logic flaw—not a hack. The issue lasted from May 1 to June 4, affecting about 1,000 organizations. Exposed data included tasks, projects, comments, and attachments. Asana disabled the feature, fixed the bug, and is notifying affected users. They recommend reviewing AI-generated content and pausing MCP use for now.

[Read more here](https://www.bleepingcomputer.com/news/security/asana-warns-mcp-ai-feature-exposed-customer-data-to-other-orgs/)

### Recent Posts

- [CMMC DIB Readiness Updates  \  \ Oct 6, 2025](/content/regulatory-updates/f/cmmc-dib-readiness-updates/index.html)
- [eSIM security flaw  \  \ Jul 14, 2025](/content/regulatory-updates/f/esim-security-flaw/index.html)
- [Third-party breach affects Scania  \  \ Jun 18, 2025](/content/regulatory-updates/f/third-party-breach-affects-scania/index.html)