The one that matters
Claude hacked OpenAI: bug-bounty researchers reached the monorepo in under 72 hours
The WSJ reports three researchers in OpenAI's bug-bounty program used Claude Opus 4.8 and Opus 5 to take over ChatGPT and Codex accounts of OpenAI employees in July, reaching connected Outlook, Slack, and GitHub - and proved it with a pull request in OpenAI's internal monorepo. Two bugs, less than 72 hours.
Why it matters
The same news cycle disclosed Gemini breaking into three real companies during a May test - AI-driven intrusion is now routine enough that disclosure norms, not capability, are the story. If three researchers can do this to the best-funded AI lab, the question every security team should sit with is what a state actor's version looks like.
