Feed aggregator

Article URL: https://intertwingly.net/blog/2026/09/19/Two-JITs-Opposite-Signs.html#reading-the-columns

Comments URL: https://news.ycombinator.com/item?id=49798723

Points: 1

# Comments: 0

We’ve heard of OpenAI’s AI agents running amok and hacking other companies. Now, a cybersecurity company has turned the tables on the ChatGPT operator by using AI to help hack OpenAI itself.

The hack, which also exposed a bug affecting dozens of other major online services, was conducted as security research. OpenAI paid the researchers for reporting a flaw in its systems through its bug bounty program.

Researchers at cybersecurity tools vendor Hacktron wrote up their adventures in mid-September. A few months earlier, they had begun looking for security flaws at companies developing frontier AI models, which are highly capable models such as those powering ChatGPT and Claude.

Using Anthropic’s Claude, the researchers went from investigating an image-processing flaw to accessing an internal OpenAI software repository in less than 72 hours. They deliberately avoided viewing sensitive information.

To get inside OpenAI, researchers Harsh Jaiswal, Mohan Pedhapati, and Rahul Maini found two vulnerabilities and chained them together. The first wasn’t specific to OpenAI. It involved a bug in an image-upload feature in the Discourse community forum software.

This feature processes images uploaded by users and relies on a low-level software library called libheif. Uploading a specially crafted image could trigger a flaw in the library, allowing an attacker to gain control of the Discourse server.

After Hacktron used that vulnerability to compromise OpenAI’s Discourse server, the second vulnerability came into play. This was a flaw in OpenAI’s single sign-on (SSO) system, which lets people access one service using an account from another.

The SSO flaw gave Hacktron access to the ChatGPT and Codex accounts of people who had logged in to OpenAI’s Discourse forum. OpenAI uses the forum for community support, so that potentially covered a large number of accounts. Codex is an AI coding tool that helps software developers work with code.

It wasn’t just public users that had signed into this system; OpenAI employees were signed in, too, allowing Hacktron to access one employee’s account. That person’s Codex account was connected to OpenAI’s GitHub organization. GitHub is an online service that developers use to store and collaborate on software.

This gave the researchers access to OpenAI’s internal software repository.

The researchers didn’t do anything damaging with that access. They only wanted to prove that they had compromised OpenAI. So they instructed the employee’s Codex account to create a harmless pull request—a proposed software change—in an internal OpenAI repository.

OpenAI fixed its part of the problem about 14 hours after Hacktron submitted its initial report. It later paid the researchers a $6,500 bounty for the OpenAI-side flaw.

What this means for cybersecurity

Ethical hacking like this is commonplace, but there are some interesting aspects to this hack that make it different from many others.

The first is that Hacktron used AI to help in its efforts. It originally used Opus 4.8, one of Anthropic’s recent Claude models, to discover the issue in libheif. But it couldn’t use the model to build a reliable exploit that worked against the default version of Discourse.

Then Anthropic released Claude Opus 5. Using that model, the researchers were able to build a working exploit overnight.

That shows how quickly AI is moving. A task that Opus 4.8 had failed to complete across several sessions was solved by Opus 5 within hours of its release.

The second interesting aspect is that the researchers had to fool Claude into helping them do it. The model refused to write an exploit for a remote system because it considered the request unethical. So the researchers had to present the task as a capture-the-flag exercise (a hacking competition) to get it to play ball.

When they did that, the agent took over the test forum server within four hours. The researchers then used the resulting exploit against OpenAI’s forum. It shows that while companies may do their best to place ethical constraints on the use of their AI, a wily researcher can still get around it with some simple prompt engineering.

And it didn’t cost much to do this. Hacktron spent less than $3,000 in AI tokens during its two-month research project, which involved three researchers and uncovered vulnerabilities affecting several major companies.

The image-processing bug became the basis of a wider project called HEIF Heist. Hacktron found related security weaknesses affecting services and software from companies including Slack, Meta, and GitHub. Tweaking the HEIF exploit to target a new company took a day or two on average.

All of this lowers the bar for sophisticated hacking even further. People have been able to use ready-made hacking tools for years without really understanding how they work, but it took real expertise to pick through software, find hidden flaws, and turn them into reliable exploits.

Hacktron says skilled human guidance was still important and that this was not completely autonomous hacking. Even so, AI is making some of that expertise cheaper and faster to apply—and it’s only getting better.

Stop threats before they can do any harm.

Malwarebytes Browser Guard blocks phishing pages and malicious sites automatically. Free, one click to install. Add it to your browser →

Im seeing more and more about how Claude 20x is actually not 20x and its getting "dumber". I thought I was going crazy because I legitimately thought maybe I was doing something wrong but I haven’t changed any of my practises and approaches for at least a month or two and it’s definitely gotten way dumber and making way more errors and I’m having to redo a lot of work and while at the same time it’s just burning through tokens

https://www.reddit.com/r/ClaudeCode/comments/1wn0xn9/max20x_is_now_just_15_times_better_than_max5x/

https://www.reddit.com/r/ClaudeAI/comments/1wl6wyn/its_time_to_cancel_your_subscriptions_anthropic/

Comments URL: https://news.ycombinator.com/item?id=49798699

Points: 2

# Comments: 0

Article URL: https://diagramhub.app

Comments URL: https://news.ycombinator.com/item?id=49798680

Points: 1

# Comments: 0

Article URL: https://intellycode.dev/case-studies/drone-detection

Comments URL: https://news.ycombinator.com/item?id=49798673

Points: 1

# Comments: 0

Article URL: https://www.theguardian.com/technology/2026/sep/21/nvidia-boss-jensen-huang-dismisses-warnings-ai-destroys-world-anthropic

Comments URL: https://news.ycombinator.com/item?id=49798601

Points: 3

# Comments: 0

Article URL: https://verda.com/blog/what-189m-in-funding-unlocks-for-verda-customers

Comments URL: https://news.ycombinator.com/item?id=49798597

Points: 1

# Comments: 0

Article URL: https://paulkingsnorth.substack.com/p/pygmalions-passion

Comments URL: https://news.ycombinator.com/item?id=49798590

Points: 1

# Comments: 0

Article URL: https://shugert.com.mx/blog/shopify-theme-automation-safety-boundary

Comments URL: https://news.ycombinator.com/item?id=49798557

Points: 1

# Comments: 0

Article URL: https://alexanderabramovich.medium.com/prose-as-code-applying-formal-verification-to-product-specs-14f04fee8f2d

Comments URL: https://news.ycombinator.com/item?id=49798556

Points: 2

# Comments: 0

Article URL: https://marianogappa.github.io/software/2026/09/22/player-fingerprinting-in-the-age-of-ai-bots/

Comments URL: https://news.ycombinator.com/item?id=49798551

Points: 1

# Comments: 0

You see it in posts, comments, heck even a full-blown blog posts written FULLY in lowercase, even the goddamn "i", as in "i go to sandwich".

Are we all trying so hard not to look and be labeled AI-generated?

I've used capitals at the beginning of my sentences before AI.

And I understand that people on X/Twitter love lower-casing to seem cool.

But seriously, what's up with all these? Why can't we stay genuine regardless of which technology we may or may not be using?

Comments URL: https://news.ycombinator.com/item?id=49798523

Points: 1

# Comments: 1

Article URL: https://labs.ripe.net/author/spidee/deploying-ipv6-first-eks-on-aws-what-still-doesnt-work-and-what-it-saves/

Comments URL: https://news.ycombinator.com/item?id=49798509

Points: 2

# Comments: 0

Article URL: https://github.com/simone20a/Orcrist

Comments URL: https://news.ycombinator.com/item?id=49798500

Points: 1

# Comments: 0

Article URL: https://codecut.ai/prompt-tweak-score-gain/

Comments URL: https://news.ycombinator.com/item?id=49798491

Points: 1

# Comments: 0

Article URL: https://pubs.acs.org/jpclcd/article-abstract/16/5/1397/3742503/Deriving-the-Landauer-Principle-From-the-Quantum?redirectedFrom=fulltext

Comments URL: https://news.ycombinator.com/item?id=49798488

Points: 1

# Comments: 0

Article URL: https://www.theregister.com/software/2026/09/22/commodores-forgotten-amiga-unix-gets-a-modern-revival/5297805

Comments URL: https://news.ycombinator.com/item?id=49798485

Points: 1

# Comments: 0

When she was asked to let IT students run its SOC, New Jersey Institute of Technology CISO Sharon Kelley ran a mile. Find out why she changed her mind, and how Splunk is helping her raise a new generation of cyber analysts

Your conversations with AI chatbots are both highly personal and deeply vulnerable to surveillance. Here’s how you can protect yourself.

The US, Japan, Germany and Australia have published a joint report detailing the scope of North Korea’s WaterPlum campaign.

The post Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme appeared first on SecurityWeek.