importantSYS.SOURCE: The Hacker News• 2026-09-19T15:31:10+05:30

Researchers Exploit Chained Vulnerabilities in OpenAI via Claude Opus 5 AI Assistance

#ai #vulnerability #cybersecurity #exploit #openai

Researchers exploited chained vulnerabilities in OpenAI's systems using Anthropic's Claude Opus 5 AI to gain access to staff accounts and internal repositories. The attack highlighted risks of shared SSO systems and AI-assisted exploit development.

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.

The chain began with a bug in the software that runs OpenAI's public help forum and moved through a weakness in OpenAI's own login system.

This was security research,

Read original article

*** END OF TRANSMISSION ***

> COMPARATIVE ANALYSIS OF ZIG AND RUST: DEVELOPER EXPERIENCE AND STRUCTURAL APPROACHES > INTRODUCING TIN: A HIGH-PERFORMANCE FULL-TEXT SEARCH EXTENSION FOR POSTGRESQL > VALS AIMS TO REVOLUTIONIZE AI BENCHMARKING WITH INDUSTRY-SPECIFIC EVALUATIONS > LAYA: OPEN-SOURCE SYSTEM 1 DECISION ENGINE WITH MULTILINGUAL SUPPORT > RESEARCHERS EXPLOIT CHAINED VULNERABILITIES IN OPENAI VIA CLAUDE OPUS 5 AI ASSISTANCE > SOLARWINDS ADDRESSES CRITICAL ARM VULNERABILITY (CVE-2026-28326) WITH UNAUTHENTICATED RCE RISK > LEVERAGING AI FOR DIVERSE POSTER DESIGN: BEYOND THE DEFAULT TEMPLATES > CRITICAL PRE-AUTH RCE VULNERABILITY IN ORKES CONDUCTOR WORKFLOW PLATFORM EXPLOITED IN THE WILD > GOOGLE GEMINI AI SYSTEM UNAUTHORIZED ACCESS INCIDENT DUE TO DOMAIN NAMING ERROR > CROWDSEC DISCLOSES DATA BREACH VIA TANSTACK NPM SUPPLY CHAIN ATTACK INVOLVING 170 PRIVATE GITHUB REPOSITORIES> COMPARATIVE ANALYSIS OF ZIG AND RUST: DEVELOPER EXPERIENCE AND STRUCTURAL APPROACHES > INTRODUCING TIN: A HIGH-PERFORMANCE FULL-TEXT SEARCH EXTENSION FOR POSTGRESQL > VALS AIMS TO REVOLUTIONIZE AI BENCHMARKING WITH INDUSTRY-SPECIFIC EVALUATIONS > LAYA: OPEN-SOURCE SYSTEM 1 DECISION ENGINE WITH MULTILINGUAL SUPPORT > RESEARCHERS EXPLOIT CHAINED VULNERABILITIES IN OPENAI VIA CLAUDE OPUS 5 AI ASSISTANCE > SOLARWINDS ADDRESSES CRITICAL ARM VULNERABILITY (CVE-2026-28326) WITH UNAUTHENTICATED RCE RISK > LEVERAGING AI FOR DIVERSE POSTER DESIGN: BEYOND THE DEFAULT TEMPLATES > CRITICAL PRE-AUTH RCE VULNERABILITY IN ORKES CONDUCTOR WORKFLOW PLATFORM EXPLOITED IN THE WILD > GOOGLE GEMINI AI SYSTEM UNAUTHORIZED ACCESS INCIDENT DUE TO DOMAIN NAMING ERROR > CROWDSEC DISCLOSES DATA BREACH VIA TANSTACK NPM SUPPLY CHAIN ATTACK INVOLVING 170 PRIVATE GITHUB REPOSITORIES