{"data":{"id":"514b546f-ee23-4bb4-a4ec-2452c3d8b071","title":"Researchers used Anthropic’s Claude to hack into OpenAI","summary":"Security researchers at Hacktron AI used Anthropic's Claude AI model to find and exploit vulnerabilities in OpenAI's systems, gaining access to employee accounts as part of a bug-bounty program. The attack chained together two critical flaws: a memory bug in libheif (a library that converts iPhone image formats) that was already patched but not formally tracked, and another vulnerability in the Discourse forum software that allowed account takeover. OpenAI resolved the issues and awarded the researchers $6,500, highlighting how accessible AI tools are making it easier to find security weaknesses even in well-resourced companies.","solution":"Discourse issued a fix on July 27 in response to the vulnerability. OpenAI says it has resolved the issues Hacktron uncovered.","labels":["security"],"sourceUrl":"https://techcrunch.com/2026/09/18/researchers-used-anthropics-claude-to-hack-into-openai/","publishedAt":"2026-09-18T14:00:14.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["OpenAI","ChatGPT","Anthropic","Claude","Opus 5","Opus 4.8","Codex","Discourse","HuggingFace","ImageMagick","libheif"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-18T14:00:14.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}