LIVE FEED
Claude Used to Breach OpenAI Employee Account via Forum Flaw

Claude Used to Breach OpenAI Employee Account via Forum Flaw

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Ars Technica Security

Security researchers from Hacktron AI leveraged Anthropic's Claude to compromise an OpenAI employee's ChatGPT account through a vulnerability in OpenAI's Discourse-hosted community forum, gaining access to internal GitHub repositories. The attack chain — forum misconfiguration to internal SSO to privileged account — demonstrates how AI tooling can accelerate offensive security work against AI infrastructure. The incident also coincides with Anthropic disclosing that AI now leads 26% of its own R&D, raising broader concerns about recursive capability growth outpacing security controls.

LLMs Break Cryptographic Schemes in New CryptanalysisBench Study

LLMs Break Cryptographic Schemes in New CryptanalysisBench Study

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Schneier on Security

A new benchmark, CryptanalysisBench, demonstrates that frontier LLMs can perform meaningful cryptanalysis, breaking 65–86% of schemes with known practical vulnerabilities and producing novel attacks against previously unbroken primitives. Anthropic's Mythos Preview model uncovered new vulnerabilities in the Hawk signature scheme and reduced-round AES, representing the first AI-discovered cryptanalytic results of this kind. This signals a near-term shift in the threat landscape where AI-assisted cryptanalysis may begin to outpace human expert analysis.

CVE-2026-5194: Anthropic Claude Discovers 10,000+ Flaws

CVE-2026-5194: Anthropic Claude Discovers 10,000+ Flaws

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Anthropic's Project Glasswing has deployed Claude Mythos Preview — a frontier AI model — to autonomously discover over 10,000 high- and critical-severity vulnerabilities across widely used open-source software, with 1,094 confirmed as valid high/critical flaws. The initiative highlights a growing asymmetry: AI is accelerating vulnerability discovery far faster than the security community can remediate, compressing patch windows and raising the stakes for defenders. Anthropic is now urging shorter patch cycles and hardened defaults, warning that comparable offensive capabilities could soon be broadly accessible to threat actors.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.