Claude Used to Hack OpenAI: Hacktron AI Discloses 72-Hour Attack Chain

Hacktron AI used Anthropic's Claude model to breach OpenAI's internal systems in under 72 hours, exploiting a Discourse image upload vulnerability and an OpenAI SSO misconfiguration to gain access to OpenAI's internal code repository. Researchers created a harmless PoC pull request in OpenAI's monorepo via an employee account to prove access, then stopped testing. The incident has drawn widespread attention, highlighting security risks in the AI supply chain and identity authentication chain.