Anthropic’s Claude helped cybersecurity researchers breach OpenAI: report<\/p>\n
Hacktron team says it accessed OpenAI\u2019s internal code repository before reporting vulnerabilities to company<\/p>\n
Jacob Coxon leaves the AI industry after working on pretraining AI models at Anthropic. AFP<\/p>\n
A three-person cybersecurity research team used Anthropic\u2019s Claude Opus 5 to exploit vulnerabilities in an OpenAI community forum, take control of employee accounts and demonstrate access to the company\u2019s private code repository<\/p>\n
The operation began on July 23 and was carried out by researchers from Hacktron AI, who disclosed the vulnerabilities to OpenAI and stopped testing without examining the company\u2019s<\/p>\n
The Wall Street Journal, which interviewed the researchers and first reported the incident, said OpenAI paid the team $6,500 for its discovery<\/p>\n
The researchers reported the OpenAI-side vulnerability through the company\u2019s bug-bounty programme. Testing of the third-party forum software itself, however, was outside the scope of OpenAI\u2019s bounty programme<\/p>\n
Read:\u00a0<\/strong>OpenAI’s rogue agents probed Hugging Face for weaknesses two months before major hack<\/p>\n The researchers, Harsh Jaiswal, Mohan Pedhapati and Rahul Maini, published a detailed technical account explaining how they combined a flaw in the software behind OpenAI\u2019s community forum with a separate problem in the company\u2019s sign-on system<\/p>\n The attack began at community.openai.com, a help forum powered by the third-party discussion platform Discourse<\/p>\n Hacktron found that certain uploaded image formats were processed through ImageMagick and a vulnerable version of the image-decoding<\/a> library libheif. The vulnerability allowed specially prepared image data to trigger remote code execution, meaning an attacker could potentially run commands on the forum\u2019s server<\/p>\n A separate identity-management flaw then allowed the researchers to move from a compromised forum session to ChatGPT and Codex accounts belonging to active forum members, including OpenAI employees<\/p>\n Because those accounts could be connected to other services, the potential reach extended to platforms including GitHub, Slack and Outlook<\/p>\n To demonstrate the impact without reading confidential material, the researchers instructed a compromised employee\u2019s Codex account, which was connected to OpenAI\u2019s GitHub organisation, to open a harmless pull request in the company\u2019s private \u201copenai\/openai\u201d monorepo, the central digital vault housing the core<\/p>\n The team said it stopped testing immediately afterwards and updated its report to OpenAI<\/p>\n \n Related:<\/strong> \n <a href="https:\/\/yoursite.com\/automation-africa\/" title="WhatsApp Marketing<\/a> Automation Africa: 6 Dangerous Mistakes Brands Make in Nigeria”> Join Justfine Infotech<\/strong> and build real digital skills in AI, automation, web development, digital marketing, office productivity, e-commerce, freelancing and cybersecurity.<\/p>\n Available Programmes:<\/strong> WhatsApp:<\/strong>LATEST<\/h2>\n
Anthropic’s Claude helped cybersecurity researchers breach OpenAI: report<\/h3>\n
King Charles warns AI leaders of ‘existential dangers’<\/h3>\n
Former Rockstar developer\u2019s studio reportedly shutting down after MindsEye struggles<\/h3>\n
Chinese AI not powerful enough to see rogue-AI risks, says Huawei<\/h3>\n
German court rules Meta liable for fake ads on Instagram, Facebook<\/h3>\n
US Senate blocks AI \u2018kill switch\u2019 bill amid debate over superintelligence risks<\/h3>\n
MOST READ<\/h2>\n
Khuhro regrets \u2018unintentional\u2019 remarks about Field Marshal Asim Munir<\/h3>\n
Makkah defence pact has reached point of implementation: Defence Minister Khawaja Asif<\/h3>\n
Islamabad ATC sends Imaan, Hadi on judicial remand after SC orders release on bail<\/h3>\n
‘Four-day working week’ notification circulating online is fake: MoIB<\/h3>\n
Full time VCs appointed for single term<\/h3>\n
Cantt building scam exposed<\/h3>\n
OPINION<\/h2>\n
Stories from another time<\/h3>\n
Pakistan Art Chronicles: new chapter in art documentation<\/h3>\n
Generosity is not a substitute for justice<\/h3>\n
Transformation in the global order<\/h3>\n
AI – the story of greed and capitalism<\/h3>\n
New currency of respect<\/h3>\n
\n <a href="https:\/\/yoursite.com\/automation-training-benin\/" title="Digital Automation Training Benin: 5 Winning Skills Employers Demand in 2026<\/a>“>
\n Digital Automation Training Benin: 5 Winning Skills Employers Demand in 2026
\n <\/a>\n <\/p>\n
\n WhatsApp Marketing Automation Africa: 6 Dangerous Mistakes Brands Make in Nigeria
\n <\/a>\n <\/p>\n<\/div>\nWant to learn this practically?<\/h3>\n
\n 6 Weeks Certificate \u2022 3 Months Professional Certificate \u2022 6 Months Diploma \u2022 Full Professional Diploma<\/p>\n
\n +229 01 57 57 99 15
\n +229 01 66 68 11 60<\/p>\n