Three researchers used Claude to reach OpenAI’s internal code. OpenAI paid $6,500 and closed the hole in 14 hours.
19-09-2026 08:27 via thenextweb.com

Three researchers used Claude to reach OpenAI’s internal code. OpenAI paid $6,500 and closed the hole in 14 hours.

Three researchers at Hacktron AI used Anthropic’s Claude to chain two weaknesses and reach OpenAI employee accounts and an internal code repository, in under 72 hours. They disclosed privately, OpenAI patched the single sign-on flaw in about 14 hours, and the team was paid $6,500. Neither weakness was an AI vulnerability, and the research paper […]
This story continues at The Next Web
Read more »

Web design news



TakeMe2Space to launch AI computing satellite on SpaceX rocket on 1 October
TakeMe2Space to launch AI computing satellite on SpaceX rocket on 1 October
Istanbul Ignited by Slush’D returns with 3,000 attendees and 600 investors
Istanbul Ignited by Slush’D returns with 3,000 attendees and 600 investors
OpenAI agents scanned a UN statistics site 16,500 times, researcher says
OpenAI agents scanned a UN statistics site 16,500 times, researcher says
US jury orders Apple to pay Taction $5.7bn over iPhone haptics patents
US jury orders Apple to pay Taction $5.7bn over iPhone haptics patents
UK campaigners who beat AI copyright plan warn Australia
UK campaigners who beat AI copyright plan warn Australia
Trump to host Anthropic’s Dario Amodei at White House dinner, Axios reports
Trump to host Anthropic’s Dario Amodei at White House dinner, Axios reports
China reportedly may let Alibaba and ByteDance buy new Nvidia chips
China reportedly may let Alibaba and ByteDance buy new Nvidia chips
From AI endpoints to IAM: 5 cybersecurity CEOs we’ve been watching this summer
From AI endpoints to IAM: 5 cybersecurity CEOs we’ve been watching this summer
GlobalFoundries reportedly sees strong demand for Chinese optical modules
GlobalFoundries reportedly sees strong demand for Chinese optical modules
Discord rolls out global age checks that sort most users automatically
Discord rolls out global age checks that sort most users automatically
The inevitable problem with measuring B2B marketing by leads
The inevitable problem with measuring B2B marketing by leads
EU’s AI envoy tells commissioners to focus on using AI, Politico reports
EU’s AI envoy tells commissioners to focus on using AI, Politico reports
Council backed Devon AI datacentre before it went public, Guardian reports
Council backed Devon AI datacentre before it went public, Guardian reports
Australian inquiry asks Altman and Amodei to testify
Australian inquiry asks Altman and Amodei to testify
Desktop versie