Back to Latest SignalTHE HACKER NEWS / SECURITY

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Source: The Hacker News · SEP 19, 2026

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in the software that runs OpenAI's public help forum and moved through a weakness in OpenAI's own login system. This was security research,

IN THIS STORY
  • Claude Opus 5

Sources

  • Read the original at The Hacker News

Related on Frontier

  • OpenAI partners with Cathedral to test its security defenses and revamps its Security Bug Bounty program, including quadrupling rewards for critical findings (OpenAI) Nov 3, 2026
  • Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link (Swati Khandelwal/The Hacker News) Oct 31, 2026
  • Anthropic says a malicious actor used access to Cursor's marketplace to publish a "tampered" copy of the Claude Code extension, which it didn't build or publish (Felix Rieseberg/@felixrieseberg) Oct 31, 2026
  • Preparing our next security sprint to harden OpenAI Nov 2, 2026
  • Malicious Claude Code Extension Served in Cursor Supply Chain Attack Nov 2, 2026
MORE LATEST SIGNALSIGNALS