Skip to content
ERP LEADERS
Subscribe to the brief Follow on LinkedIn

The news behind the software that runs companies, explained for everyone.

Security

Anthropic's Claude helped researchers reach OpenAI staff accounts in three days.

Three security researchers at Hacktron used Anthropic's Claude models to develop exploit code against OpenAI and reached several OpenAI employee ChatGPT accounts, The Register reported.

ERP LEADERS news desk · · First reported by The Register · Edition no. 12

The researchers wrote that they went from the first finding to demonstrating they could reach an internal OpenAI repository "by opening a harmless pull request" in under 72 hours, and then "stopped any further testing". No internal code or sensitive data was taken.

OpenAI patched the flaw in about 14 hours and paid a $6,500 bounty. The company said: "Testing against the Discourse-hosted community.openai.com was explicitly excluded from our bug bounty program. The award recognizes the OpenAI-side finding, not the actions against Discourse."

Anthropic did not respond to The Register's requests for comment.

The models that helped write the exploit are generally available. OpenAI's own statement puts part of the work on a Discourse-hosted community site that its bounty programme did not cover.

If a researcher found the equivalent in your estate this morning, how many hours until it reached your security team, and how many until it was closed?

Sources

Spotted an error? Tell us. Every correction is logged on Standards.

Your reading room

Companies in this story
AnthropicOpenAI

Our file on Anthropic

  1. 5 NovFiled later

    Revolut says self-hosted AI models cut its AI coding costs by roughly 90%. It dropped Anthropic's Claude Code as its default.

  2. 4 NovFiled later

    Half of Slack messages are no longer from people, Salesforce says. It counts a billion messages a day.

  3. 3 NovFiled later

    Claude maker Anthropic disclosed about $895 billion of computing deals in its IPO filing. That is 27 times its nine-month revenue.

  4. 3 NovFiled later

    Oracle NetSuite user Brennan Industries says AI builds up to five ERP apps a day. ERP architects maintain that code.

  5. 31 OctFiled later

    Anthropic's backer Blackstone now expects a junk credit rating for the Claude maker, the FT reported. Blackstone had predicted investment grade.

All 50 Anthropic stories

For your next steering committee

Questions for your own programme. They are not findings about any company in this story.

  1. 1Ask when systems of this kind in your landscape were last patched, and who confirms it.
  2. 2Ask which finance and ERP accounts can be reached from outside, and how each sign-in is protected.
  3. 3Ask how long a restore took the last time it was tested.

Issue 01 of the ERP LEADERS brief puts a timeline, the three-number review and six questions on one page. Read issue 01

Founding reader view is on in this browser. It is a reading view, not secure access. Print the working sheet

Founding reader

Welcome back. · Issue 01

1 comment under this story on LinkedIn. Read the discussion

Keep reading

The ERP LEADERS brief Subscribe