[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcOQFvAISwdr3wD27wklNIukafakchEyqQQEYHJcyy54":3},{"article":4,"iocs":54,"watch_terms":59,"solutions":60,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"e548821d-aa9d-4ca0-90cc-da1e77278825","Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws","claude-opus-5-helped-researchers-take-over-openai-staff-accounts-via-chained-fla-cccf7b","Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with a bug in the software that runs OpenAI's public help forum and moved through a weakness in OpenAI's own login system. This was security research,","Security researchers leveraged Anthropic's Claude Opus 5 to chain two vulnerabilities, one in OpenAI's public help forum software (Discourse, specifically libheif) and another in OpenAI's own login system. This allowed them to access several OpenAI employee accounts for ChatGPT and Codex, and subsequently reach an internal code repository. The researchers reported the findings to OpenAI, who confirmed the fix and awarded a $6,500 bounty.","Researchers used Claude Opus 5 to chain flaws, gaining access to OpenAI staff accounts and code repositories.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fclaude-opus-5-helped-researchers-take.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhAElV4rXwWf_kTjj5e0UJFsEG-a0B7MUsCFqhFLYEA76kk2A7UeXbaG0DfRt-Syf7dxx4bHUanr0lVvwIUFyFgtPIfhyphenhyphenx61ccuo3oDZr6-wKROoEAVWjrAcKWuZ5WdlvL_pmKC91i9juBrsnI3FiLTGGgjnnJRAnjTgAxAbMjcbCTxZSWybZPPtG8HN1E\u002Fs1600\u002Fclaude-openai.jpg","2026-09-19T10:01:10+00:00","2026-09-19T12:00:20.604651+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Claude Opus 5","product",{"name":21,"type":22},"Anthropic","vendor",{"name":24,"type":19},"ChatGPT",{"name":26,"type":19},"Codex",{"name":28,"type":22},"OpenAI",{"name":30,"type":19},"Discourse","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55],{"type":56,"value":57,"context":58},"cve","CVE-2026-32882","Flaw in libheif leading to memory corruption and potential RCE on Discourse forum servers.",[21,28,18],{"controls":61,"vendors":146},[62,91,117],{"slug":63,"name":64,"problem":65,"products":66},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":92,"name":93,"problem":94,"products":95},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[96,104,112],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":113,"product_name":114,"url":115,"description":116},"identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":118,"name":119,"problem":120,"products":121},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",[],{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":164},"chained-vulnerabilities-in-forum-software-and-login-system-expose-openai-employee-accounts","Chained Vulnerabilities in Forum Software and Login System Expose OpenAI Employee Accounts","Researchers exploited two distinct vulnerabilities in sequence — a flaw in the libheif library used by OpenAI's Discourse-based help forum, combined with a weakness in OpenAI's own authentication system — to gain unauthorized access to employee accounts and an internal code repository. This attack demonstrates the danger of vulnerability chaining, where individually moderate flaws become critical when combined. Third-party software components (like libheif embedded in Discourse) expand an organization's attack surface in ways that are easy to overlook. The incident underscores that public-facing support and community platforms are not low-risk assets — they can serve as pivot points into core internal systems.",[152,153,154,155,156,157,158,159,160,161,162,163],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 6: Access Control Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST SP 800-161: Supply Chain Risk Management (SCRM) for third-party libraries","NIST CSF ID.AM-2: Software platforms and applications inventoried","OWASP A06:2021 – Vulnerable and Outdated Components","OWASP A01:2021 – Broken Access Control","ISO\u002FIEC 27001 Annex A.12.6: Management of Technical Vulnerabilities","ITIL: Change and Release Management (emergency patch procedures)",{}]