
Security researchers used Claude to help them hack into OpenAI
Hacktron’s three-person team used Claude Opus to turn a Discourse HEIF bug into OpenAI employee access—and a pull request proving they reached Monorepo.
Desk
Coverage tied to Anthropic and Claude.

Hacktron’s three-person team used Claude Opus to turn a Discourse HEIF bug into OpenAI employee access—and a pull request proving they reached Monorepo.

Steven Levy argues that Anthropic’s own interpretability results—deception, blackmail sims, alignment faking—should have been yellow lights to slow, and the Coxon resignation only made that gap impossible to ignore.

Hacktron AI used Claude—Opus 5 after Opus 4.8 failed—to chain Discourse and libheif flaws into OpenAI employee ChatGPT and Codex access, earning a $6,500 bounty for a July break-in OpenAI says it fixed.

Ars (via Financial Times) adds that Hacktron’s Claude-assisted break-in reached an employee ChatGPT account with GitHub code access—and lands as Anthropic says Claude now leads 26% of its R&D work, up from 1% in March.

The Verge’s living brief tracks whether Anthropic, OpenAI, Google, Microsoft, and xAI’s post-summer “pace the frontier” talk becomes real slowdown—or regulatory theater next to China-race acceleration.

Anthropic’s Claude Code Projects beta runs parallel cloud threads under a coordinator—shared memory, goals, and repo copies—with merge-conflict resolution, starting for select Pro/Max users before wider rollout.

At Dreamforce, Amodei pitched industry standards after rivals’ safety incidents, Huang said no new laws were needed, Altman called fear justified—while Kapoor argued loss-of-control is as much negligent cybersecurity as alignment mysticism.

On Decoder, Mustafa Suleyman argues AI threats are real, containment must sit beside alignment—and that Anthropic’s model-welfare framing makes the hard control problems harder.

Google, Nvidia, and Anthropic are backing Emerald AI’s demand-response coalition—betting paused jobs and shifted loads can unlock far more data-center megawatts without waiting on new plants.

Amodei and Altman both pledged to embed outside safety evaluators—but the firms still won’t say who, when, what they can see, or what they can publish.

Google opened early access to a Home MCP server so Claude, ChatGPT, and other agents can control Nest gear and Matter devices—with Cloud project setup and explicit permissions.

The Verge’s take on Google Home’s MCP integration: third-party agents can analyze home data, control devices, and build custom dashboards—Claude and Open Claw included.