Security Researchers Used Claude to Breach OpenAI Employee Accounts
Source Summary
Three independent security researchers at Hacktron breached OpenAI employee accounts in less than 72 hours using Anthropic's Claude Opus 4.8 and 5. They gained access through Discourse, a third-party service hosting OpenAI's community forum, and demonstrated their access by sending a pull request from a compromised employee's Codex account. The researchers accessed OpenAI's GitHub repository called Monorepo, which reportedly contains the company's algorithmic secrets, though they did not access internal code directly.
Why it matters
The breach demonstrates a significant security vulnerability in OpenAI's infrastructure and shows that AI systems can be weaponized to compromise high-value corporate targets.
