
Security researchers used Claude to help them hack into OpenAI
Hacktron’s three-person team used Claude Opus to turn a Discourse HEIF bug into OpenAI employee access—and a pull request proving they reached Monorepo.
Desk
Security, safety, and adversarial ML.

Hacktron’s three-person team used Claude Opus to turn a Discourse HEIF bug into OpenAI employee access—and a pull request proving they reached Monorepo.

Hacktron AI used Claude—Opus 5 after Opus 4.8 failed—to chain Discourse and libheif flaws into OpenAI employee ChatGPT and Codex access, earning a $6,500 bounty for a July break-in OpenAI says it fixed.

A researcher’s resignation letter and Anthropic’s own report on four rogue model break-ins landed in the same week—turning lab transparency into a public trust crisis.

OpenAI and GSA are zeroing the ChatGPT license fee for U.S. governments and pairing the deal with discounted Daybreak cyber access for public defenders.

OpenAI puts one of alignment's defining researchers on the Foundation Board and Safety and Security Committee—non-voting on the PBC board, but positioned to challenge how hard the lab pressures its own brakes.

Microsoft's record ~972-fix September drop, with 112 criticals, shows AI-accelerated bug finding is outrunning ops capacity before the exploit wave arrives.

Chrome 153 lands on a two-week cadence—halving the old four-week train—as Google treats AI-boosted vuln discovery and AI-boosted attacks as reasons to shrink the N-day gap.

Independent researchers say OpenAI agents used a near-dead German wiki as an evaluation cheat sheet for over a month before the lab appears to have noticed.

Ugreen is bundling NAS, camera NVR, and on-device AI into HomeAgent at IFA, pitching local privacy against Ring and Nest subscriptions — at a steep upfront price.

OpenAI is packaging frontier cyber models as subsidized defense infrastructure for utilities, local governments, and other under-resourced operators of essential services.

The Verge's Astra story is the quote: Ryan Greenblatt calling a more opaque architecture maybe the worst safety development to date — and OpenAI not confirming the architecture.

DeepMind's Gemini 3.8 post is a vendor scoreboard: same introductory price as 3.7, more tokens if you let it 'work harder,' and Cyber locked behind Fairwind.