Skip to content
Zenteck
Latest
Jev: the new non-LLM AI model speeding up automationCalifornia AI Kill Switch: Regulation vs. Industry ControlMeta Muse for Mac: What Changes for Your WorkflowClaude Opus 5: How AI Was Used to Hack OpenAISynthID Watermarking Changes LLM Safety and Tool ExecutionInstinct and Meta Muse Add AI Phone CallsGoogle Home MCP Integration: What Changes for AI AgentsClaude Docs and Slides: What Changes in the New Interface
Analysis

Claude Opus 5: How AI Was Used to Hack OpenAI

Por Alex da Cruz2 min read0 comments
claude-opus-5-logo-fiel-openai-logo-fiel-minimal
A

Alex da Cruz

Alex da Cruz is a full-stack developer based in São Paulo, Brazil. He works with React, TypeScript and automation, and uses AI daily to solve real problems in code and operations — not as a demo. He has run an e-commerce operation end to end, and now builds and maintains the automation pipeline behind this blog. He writes about what he actually tests.

Ver perfil →

Security researchers from Hacktron AI successfully used Anthropic’s Claude to breach OpenAI's infrastructure. According to Ars Technica and TechCrunch, the attack leveraged a $6,500 bug bounty program and targeted vulnerabilities in OpenAI's community forum software.

How did Claude execute the security breach?

The attack began with a mundane upload of an HEIF image file to OpenAI's community forum powered by Discourse. TechCrunch reports that the file passed through ImageMagick and a library called libheif, exposing an unpatched memory bug. Although the bug was previously fixed by developers, it lacked a formal CVE tracking number, leaving Discourse running a vulnerable version.

What was the difference between Claude versions?

According to TechCrunch, the security team initially used a special cybersecurity version of Opus 4.8, which struggled across multiple sessions to build a working exploit. However, within hours of Anthropic releasing Opus 5, the team fed it the exact same problem, and it succeeded.

What data was accessed during the incident?

Ars Technica notes that the exploit allowed researchers to gain access to internal sign-ons and an OpenAI employee's ChatGPT account. Because this account was connected to OpenAI's internal code through GitHub, the team gained entry to sensitive software information before reporting the flaws to OpenAI, which quickly issued fixes.

Sources

  1. Researchers used Claude to hack OpenAI — arstechnica.com
  2. Researchers used Anthropic’s Claude to hack into OpenAI — techcrunch.com

Frequently asked questions

Which AI model was used to hack OpenAI?
Researchers used a special cybersecurity version of Anthropic's Claude Opus 5 to successfully build the exploit.
How much did OpenAI pay for the bug discovery?
OpenAI paid the Hacktron AI security team $6,500 as part of its bug bounty program.
What was the initial entry point of the attack?
The attackers exploited an unpatched memory bug in the libheif library triggered by image uploads on OpenAI's community forum.

Comments

0 comments

Be the first to comment.

RECOMENDADOS

Continue Lendo