Hacktron AI researchers used Claude to chain vulnerabilities in Discourse hosting OpenAI's forum, including HEIF/HEIC image processing flaw, accessing employee accounts and internal GitHub repos. Attack completed in under 72 hours and $3,000 in tokens; researchers received $6,500 bounty.
Sep 20, 2026 · 2 Sources