Three researchers used Claude to break into OpenAI staff accounts.
Security startup Hacktron chained an image-upload bug in OpenAI's forum with a single sign-on flaw. Three researchers reached staff accounts and filed a pull request inside OpenAI's private code repository. OpenAI paid them $6,500 after Claude Opus 5 wrote an exploit that Opus 4.8 could not.
Why it mattersA model that can chain real bugs changes who can attack you, not just who defends. The same jump that helps a security team also arms anyone with an account.
Read in the app — free, in 9 languages
Related stories
Fifty AI agents built a Minecraft town and invented bureaucracy.2026-10-30A fake Claude Code update put a backdoor on up to 5,000 computers.
2026-10-30OpenAI says its new monitors would have caught its own breach early.
2026-10-30A worker's personal Claude agent sat on a Pentagon network for months.
2026-10-30GitHub's Copilot now picks the AI model for each coding task itself.
2026-10-29