Researchers used Claude to hack into OpenAI
Read original source →theverge.com
Hacktron AI's three-person team breached OpenAI employee accounts in under 72 hours using Claude Opus 4.8 and 5, chaining two critical flaws in Discourse's HEIF image processing. OpenAI paid $6,500 via its bug bounty; the HEIF Heist project cost under $3,000 in tokens and was detected only by Shopify.
6 sources
Security researchers used Claude to help them hack into OpenAItheverge.com
Researchers used Anthropic’s Claude to hack into OpenAItechcrunch.com
Researchers used Claude to hack OpenAIarstechnica.com
Independent Security Researchers Used Anthropic’s Claude to Break Into OpenAIhacktron.ai
With the latest external hack of OpenAI via Claude, closed models continue to be the tip of the iceb...bsky.app
Cyber researchers used Opus 5 to hack into OpenAI. This is pretty significant....x.com
More stories today
TimesFM 3.0, Chronos-2, Toto 2.0 fail to beat baseline on market data
A Reddit r/MachineLearning user benchmarked Google's TimesFM 3.0, Amazon's Chronos-2 and Datadog's Toto 2.0 on financial market time series and found none beat a simple baseline. The poster frames the test as a check on whether time-series foundation models extract useful predictive signal from markets.
r/MachineLearning·1 hour ago
Evercore's Emanuel calls Nvidia core of AI stock basket
Evercore ISI chief equity strategist Julian Emanuel says Nvidia anchors the firm's AI stock basket and expects the Anthropic IPO to go smoothly, speaking on Bloomberg Surveillance.
Bloomberg Technology·2 hours ago

Teacher redesigns take-home essays after AI cheating wave
A middle school library media specialist describes finding AI-written essays in fall 2023 and rebuilding assignments so AI becomes a "cognitive sparring partner" rather than a cheating tool.
EdSurge·2 hours ago

Brevis launches Arca, an app for selling your AI chats
TestingCatalog News·2 hours ago
Fortinet patches nearly 100 flaws after adding AI to security testing
Fortinet issued 89 advisories covering nearly 100 vulnerabilities, about 17 of them critical, three weeks after integrating frontier AI models into its product security testing. FortiMail took the largest batch of critical fixes, followed by FortiAuthenticator, FortiOS, FortiManager and FortiAnalyzer.
SecurityWeek·2 hours ago

Token built a browser agent that broke its own security rules
Token's Rehearsal agent runs inside the user's authenticated browser session, so servers can't distinguish its clicks from the user's — nothing in a session cookie identifies the session driver. Token's fixes: dim and lock the app while the agent moves, log every action including blocked ones, and give the agent read-only reach below the user's.
The Hacker News·2 hours ago

OpenCode team builds free alternative to paid AI dictation apps
Nav Toor·2 hours ago
Torus raises $500M for container-sized battery-plus-AI compute unit
Utah-based energy-storage startup Torus raised $500 million to launch a shipping container-sized product combining batteries with AI computing. The modular unit pairs energy storage with compute hardware.
Bloomberg Technology·2 hours ago