Slack (Victim): news timeline & CVEs

Researchers used Claude to hack OpenAI

Researchers used Claude to chain a libheif vulnerability in Discourse with an OpenAI SSO flaw, gaining access to an internal GitHub repository.

Researchers at Hacktron used Anthropic's Claude to discover and chain two vulnerabilities affecting OpenAI: a libheif flaw in Discourse's image processing and an SSO vulnerability. This allowed access to an internal OpenAI GitHub repository via an employee's Codex account. The researchers reported the flaw, received a $6,500 bounty, and discovered related issues in Slack, Meta, and GitHub as part of a larger 'HEIF Heist' project.

Malwarebytes LabsSep 22, 09:51 UTC · 5d agoVulnerability 3 sources

AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum

Hacktron researchers used Claude Opus 5 to build a libheif exploit in hours, hijacking OpenAI staff accounts via a Discourse forum shared-SSO flaw.

Three Hacktron researchers exploited a heap buffer overflow in libheif, used by Discourse via ImageMagick to process HEIC/HEIF uploads, taking under 72 hours from bug discovery to accessing OpenAI's internal repository through the community.openai.com forum's shared SSO. An upstream fix lacked a CVE and was not backported to Debian in time; Claude Opus 5 produced a working exploit in about three hours after Opus 4.8 struggled with ASLR enabled. Researchers opened one harmless pull request via a hijacked employee's Codex to prove the account takeover, and OpenAI paid a $6,500 bounty and shipped a fix in roughly 14 hours while Discourse patched and added sandboxing. The work is part of the broader HEIF Heist project targeting Slack, Meta, and GitHub Enterprise for under $3,000 in AI token costs.

Security AffairsSep 19, 13:01 UTC · 7d agoExploit / PoC

Slack

Timeline2 articles

Appears with

Researchers used Claude to hack OpenAI

AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum