technology
Hacktron Reports Claude-Assisted Attack Path Into OpenAI Accounts
Hacktron says researchers chained a libheif image-decoding flaw with an OpenAI SSO misconfiguration to access an employee’s ChatGPT and Codex account and create a proof-of-concept pull request in an internal repository. The company says Claude models helped develop the exploit, while human guidance remained necessary.