Security researchers used Claude to help them hack into OpenAI

A three-person team of researchers used a corrupted image file and forum software to hack into OpenAI. A three-person team of researchers used a corrupted image file and forum software to hack into OpenAI. A team of three independent security researchers atHacktronsays it tookless than 72 hoursfor them to hack into OpenAI employee accounts using Anthropic’s Claude Opus 4.8 and 5, theWall Street Journalreports. They were able to access OpenAI’s GitHub repository, called “Monorepo,” which reportedly contains “OpenAI’s algorithmic secrets,” according to theWall Street Journal’s sources. They stopped short of accessing internal code in Monorepo themselves, but sent a pull request from an employee’s Codex account to prove they gained access. They were able to get in through Discourse, the third-party service that hosts OpenAI’s community forums, by exploiting an issue with the system it uses to process HEIF images. According to Hacktron, Claude Opus 5 launched in the evening on July 24th, and by 10AM the next day they had used it to achieve RCE on Discourse Cloud and accessed OpenAI’s instance. Their HEIF Heist project took “only one or two days” to adapt to different companies, including OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagickand others, using less than $3,000 in tokens, and to their knowledge, was only detected by one target, Shopify. The vulnerabilities Hacktron reported to Discourse and OpenAI have since been fixed, and Hacktron says OpenAI paid it $6,500 for finding the bug, but as Hacktron CTO Mohan Pedhapati said to the WSJ, “I don’t think we are as strong as Chinese threat actors… We’re just three guys with Claude and Codex subscriptions.” A free daily digest of the news that matters most. This is the title for the native ad