OpenAI Hacked by Researchers Using Claude
The researchers said Claude Opus 5 helped them chain two flaws and reach OpenAI employee accounts and its private GitHub repository in under 72 hours.
- Security startup Hacktron disclosed this week that it used Anthropic's Claude Opus 5 to compromise an OpenAI employee's ChatGPT account by exploiting a vulnerability in the company's community forum.
- Researchers discovered a heap buffer overflow in the forum's libheif image-processing software, which they developed into a functional exploit chain using Claude Opus 5 in less than 72 hours, according to Hacktron.
- After gaining forum access, the team exploited an identity flaw to compromise an employee's Codex account, then used it to generate a benign pull request within OpenAI's internal GitHub repository.
- OpenAI patched the community forum, revoked affected sessions, and paid Hacktron a $6,500 bounty, though the company has not published a detailed account of the incident.
- CEO Zayne Zhang of Hacktron noted that "the worlds of AI safety and cybersecurity are converging," highlighting how AI agents with broad credential access create new attack surfaces across internal infrastructure.
217 Articles
217 Articles
3 Indian-origin researchers used Claude to breach OpenAI systems in 72 hours
Three Indian-origin cybersecurity researchers at Hacktron AI used Anthropics Claude models while investigating vulnerabilities that ultimately gave them access to OpenAI employee accounts and a private GitHub environment, according to reports. Harsh Jaiswal, Mohan Pedhapati and Rahul Maini said the work took less than 72 hours and cost under $3,000 in AI tokens. OpenAI later awarded them a $6,500 bounty.
Researchers at an AI security firm utilized Anthropic's Claude to exploit a security vulnerability in OpenAI, successfully infiltrating the internal system within three days. This experiment demonstrated that AI can reduce the difficulty of cyber attacks, and OpenAI immediately fixed the vulnerability. Warnings continue to mount that the threat of large-scale data leaks and system destruction will increase if state-sponsored hackers utilize AI i…
Researchers Used Claude to Exploit OpenAI Employee ChatGPT Accounts
Security researchers used Anthropic’s Claude AI models while investigating vulnerabilities that ultimately allowed them to take control of several OpenAI employees’ ChatGPT accounts, highlighting how advanced AI tools are changing the speed and scale of cybersecurity research. The three researchers, from security firm Hacktron, chained together two vulnerabilities and demonstrated that compromised access could extend [...]
Researchers gained access to an OpenAI employee's ChatGPT account, allowing them to read internal messages. According to the report, the cybersecurity team discovered a vulnerability in OpenAI's system using a specialized security tool from Anthropic. This investigation was conducted as part of a bug bounty program. The company paid the researchers $6,500. The incident has raised new concerns about the security of AI models.
Coverage Details
Bias Distribution
- 40% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
