The vulnerabilities AI finds are the ones attackers want
GTIG says AI-found flaws skew toward remote code execution, and attackers hit BeyondTrust CVE-2026-1731 within four days.
80
Organization
Hacktron
- Mentions · 7d0
- Mentions · 30d1
- All mentions18
- First seenAug 27, 2026
- Last mentioned29d ago
Timeline
18 articles · newest firstGoogle: AI Is Changing the Pace and Profile of Vulnerability Discovery
Google Threat Intelligence reports monthly vulnerability disclosures doubled in 2026, with exploited-in-the-wild counts nearly doubling as AI accelerates discovery.
62
Researchers used Claude to hack OpenAI
Researchers used Claude to chain a libheif vulnerability in Discourse with an OpenAI SSO flaw, gaining access to an internal GitHub repository.
75
After spending billions, OpenAI still has gaps in its cybersecurity
Hacktron accessed OpenAI employee accounts via chained flaws, and Accomplish escaped the Codex sandbox; both were fixed.
73
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
Weekly recap led by actively exploited Cisco ISE auth-bypass CVE-2026-76460 (CVSS 10.0), plus Plugin4Shell AI-agent RCE and KREMLIN banking malware.
78
Claude Opus 5 Helps Researchers Weaponize HEIF Image Flaw Into Remote Code Execution
Researchers used Claude Opus 5 to help weaponize a HEIF image processing flaw into a remote code execution exploit.
72
HEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise
Hacktron's "HEIF Heist" research shows memory-unsafe HEIF/AVIF parsers enable RCE and data leaks in Slack, Meta, GitHub Enterprise, and OpenAI.
78
HEIF Heist
Hacktron's HEIF Heist research reveals RCE and heap-leak vulnerabilities in libheif/libde265 HEIF/AVIF decoders, affecting Meta, OpenAI, GitHub Enterprise, Discourse, and Next.js.
82
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
Hacktron researchers used Claude Opus 5 to build a libheif exploit in hours, hijacking OpenAI staff accounts via a Discourse forum shared-SSO flaw.
72
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Hacktron researchers used Claude Opus 5 to chain a libheif flaw and OpenAI SSO weakness, taking over staff ChatGPT and Codex accounts; OpenAI paid $6,500.
62
Security researchers used Anthropic's Claude to hack OpenAI's internal systems in under 72 hours
Hacktron researchers used Claude Opus 5 to exploit libheif and an SSO flaw, taking over OpenAI employee ChatGPT and Codex accounts within 72 hours.
76
Researchers use AI to find widespread software decoder flaw
Hacktron researchers, aided by Claude and GPT-5.6 Sol, disclosed HEIF Heist, memory-corruption flaws in libheif/libde265 enabling RCE against major platforms.
78
Researchers used Claude to hack OpenAI employees' ChatGPT accounts
Researchers chained a libheif heap overflow with an SSO misconfiguration to take over OpenAI employee ChatGPT accounts, earning a $6,500 bounty.
75
Security researchers used Claude to help them hack into OpenAI
Three Hacktron researchers used Claude Opus to breach OpenAI employee accounts through a Discourse HEIF flaw, reaching the Monorepo within 72 hours.
66
AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
Researchers chained a libheif RCE in Discourse with an over-privileged OpenAI forum sign-in token flaw to take over ChatGPT and Codex accounts.
72
Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories
Researchers used Claude Opus 5 to build a libheif exploit that compromised OpenAI's forum, hijacked employee ChatGPT/Codex accounts, and reached the internal monorepo.
70
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.
78
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel patches two critical Next.js unauthenticated RCE flaws: a libheif AVIF heap overflow (CVSS 9.5) and a Windows path traversal (CVE-2026-75604).
68
Related CVEs
by mentions- CVE-2026-32882<1%7.1libheif is a HEIF and AVIF file format decoder and encoder
- CVE-2026-173193%9.9Pre-Authentication OS Command Injection RCE in BeyondTrust Remote Support and PRA
- CVE-2026-19118<1%7.7Race Condition RCE in GitHub Enterprise Server
- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2026-58704<1%8.8Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation
- Critical Use-After-Free in Google Chrome Workers Enables Sandbox Escape
- CVE-2026-614101%9.4Missing Authorization Allows Unauthenticated RCE in Dell Secure Connect Gateway 5.0
- CVE-2026-581389%9.3Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS…
- CVE-2026-85982<1%9.0Stored XSS in Auth0 AD/LDAP Connector Admin Panel
- SSRF in AWS Systems Manager Agent can expose instance IAM role credentials
Appears with
- libheifproduct · 12
- OpenAIvictim · 12
- OpenAIvendor · 11
- Discoursevendor · 11
- Claude Opus 5ai model · 11
- ChatGPTproduct · 10
- Anthropicvendor · 10
- Codexproduct · 10
- Claude Opus 4.8ai model · 8
- OpenAIorganization · 8
- Anthropicorganization · 7
- ImageMagickproduct · 6
- Claude Opus 5product · 6
- GPT-5.6 Solai model · 5
- Discourseproduct · 5
- Discourseorganization · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.