In a recent security research initiative, three researchers from Hacktron successfully leveraged Anthropic's Claude Opus 5 to exploit two vulnerabilities, enabling them to take control of ChatGPT and Codex accounts belonging to OpenAI employees. This exploit began with a bug in OpenAI's public help forum software and advanced through a flaw in OpenAI's login system, ultimately granting access to an internal code repository. This incident highlights the potential for AI tools to be misused in sophisticated cyber attacks, illustrating a concerning trend in the intersection of AI and cybersecurity.
For businesses, this event underscores the importance of robust security practices, particularly in the development and deployment of AI technologies. Organizations must prioritize thorough vulnerability assessments and adopt a proactive approach to patching known issues to mitigate risks associated with chained exploits. The implications of this research are critical; as AI systems become more integrated into business operations, the potential for their misuse in compromising sensitive data and systems grows, necessitating enhanced vigilance and innovative security measures to protect against evolving threats.
---
*Originally reported by [The Hacker News](https://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.html)*