AI Summary
5 min readSecurity Researchers Used Claude to Hack OpenAI's Private Code Repository
Independent security researchers successfully used Anthropic's Claude AI to break into OpenAI's private software repository through the company's bug bounty program, gaining the ability to read and suggest changes to source code. The team, from the security firm Hactron AI, disclosed their work for the first time to the Wall Street Journal, and OpenAI paid them a $6,500 bounty after they reported the findings.
The hack began on July 23rd when Hactron's researchers found a bug in how Discourse—the third-party service hosting OpenAI's community discussion forum—processed certain image files. Using a special version of Claude Opus 4.8 made available to qualified cybersecurity practitioners, they asked the AI to write exploit code. It initially failed. But the next day, after Anthropic released Opus 5, Claude found a way to exploit the bug. The attack code gave researchers access to a Discourse server where they retrieved users' authentication tokens—the digital strings that grant access to online services.
Continue reading the full summary in the app — free to try.
Read Full Summary →Free • No credit card required
Never miss an episode of Tech Brew Ride Home
Get every new episode summarized in your inbox — free, ~5 minutes to read.
No spam. Unsubscribe anytime.
What you'll learn
- 1 (00:04) **Episode Introduction** - Host Brian McKellar previews the day's top stories: an AI-powered hack of OpenAI, the launch of OpenAI Astra for Law, and Anthropic's redesigned Claude Projects and new wet lab.
- 2 (01:15) **OpenAI Hacked by AI Agents** - Security researchers used Anthropic's Claude software to breach OpenAI's private code repository through a bug bounty program.
- 3 (06:01) **OpenAI Launches Astra for Law** - A specialized version of GPT-6 Astra for select law firms, combining a legal search index with instructions for legal analysis and writing.
- 4 (09:22) **Firm-Specific AI Tools** - OpenAI engineers embedded at law firms have built custom tools on ChatGPT Enterprise.
- 5 (11:23) **Anthropic Redesigns Claude Projects** - The revamped feature in Claude Code allows users to run multiple agent threads in parallel under a single project with shared memory and goals.
- 6 (12:46) **Anthropic Opens Bay Area Wet Lab for Biology** - The AI company is setting up a physical lab for drug research, aiming to tackle neglected diseases.
- 7 (16:14) **Weekend Long Reads: AI's Impact on Math and VC** - Two suggested articles on the AI boom's broader effects.
+ Full timestamped outline available in the app
Show Notes
Security researchers used Claude to hack into OpenAI's private code repository through a bug bounty program, OpenAI launched Astra for Law for select firms, Anthropic redesigned Claude projects to run parallel agent threads, and opened a Bay Area biology lab.
- Security researchers in an OpenAI bug bounty program hacked OpenAI, accessing its "monorepo" on GitHub, using a cybersecurity version of Opus 4.8 and Opus 5 (The Wall Street Journal)
- OpenAI launches Astra for Law, combining GPT-6 Astra with a legal search index and instructions for legal analysis and writing, initially for select law firms (OpenAI)
- SiliconANGLE reports Astra for Law passed 54% of legal-research benchmark questions versus 38.7% for base GPT-6 Astra, launches with 26 partner-built plugins connecting Relativity, Clio, and iManage, and brings ChatGPT for Word to general availability (SiliconANGLE)
- Anthropic redesigns Claude projects, letting users describe work in one conversation and have Claude manage it across parallel threads, starting in Claude Code (Anthropic)
- The Verge reports each project thread runs as its own Claude Code cloud session on a separate repo branch, with a coordinator resolving overlapping work as merge conflicts, and beta access starting today for select Claude Pro and Max subscribers (The Verge)
- Anthropic Life Sciences Head Eric Kauderer-Abrams says the AI company set up a Bay Area wet lab for physical biology work, as it pushes into AI disease research (Reuters)
Longreads
- Theoretical computer scientist Scott Aaronson says he's heard rumors that AI labs are sitting on major unpublished math solutions, and describes a mathematics community consumed by anxious conversation about the "AI tsunami" after the hostile response to a recent Navier-Stokes proof (Shtetl-Optimized)
- The FT reports the AI boom is fueling a resurgence in VC bets on "moonshot" sectors like nuclear fusion and brain-computer interfaces, as Dealroom data sho
More from this podcast
Tech Brew Ride Home →