Hackers breach OpenAI using Claude tools, gaining access to employee accounts and the company's internal codebase
By Etiido Uko, Tom's Hardware
Picture: Tom's Hardware
A team of white-hat hackers from cybersecurity startup Hackron AI has successfully hacked OpenAI using Claude tools. In an X post on September 18, the team claimed they breached OpenAI's internal codebase on July 25 and gained access to the ChatGPT and Codex accounts of some OpenAI employees. They established proof of the hack via a pull request to OpenAI's private repository before reporting the vulnerabilities to OpenAI. The company reportedly fixed the issue within 14 hours of the report and paid the researchers a $6,500 bounty. Operating as hackers under OpenAI’s bug bounty program, Hacktron researchers uncovered critical vulnerabilities that granted them access to internal employee tools and the ability to compromise private software repositories.
This report was first published by Tom's Hardware. What you see here is a brief excerpt. The full text is theirs.
Continue reading at Tom's Hardware
