4 stories tagged by Digg
Security researchers (Hacktron AI) chained vulnerabilities in OpenAI's Discourse forum and SSO/session tokens using Claude Opus 5, gaining access to employee accounts and OpenAI's internal GitHub monorepo. They reported findings and received a $6,500 bounty.
Sep 20, 2026 · 2 Sources
Hacktron AI researchers used Claude to chain vulnerabilities in Discourse hosting OpenAI's forum, including HEIF/HEIC image processing flaw, accessing employee accounts and internal GitHub repos. Attack completed in under 72 hours and $3,000 in tokens; researchers received $6,500 bounty.
Sep 20, 2026 · 2 Sources
OpenAI paid $6,500 after the team disclosed chained vulnerabilities found with AI assistance.
Sep 20, 2026 · 10 Sources
s0rk.net reports that Hacktron used Claude to compromise OpenAI accounts and reach a private repository in under 72 hours.
Sep 19, 2026 · 2 Sources