Researcher slams OpenAI's $6,500 bounty: hacked ChatGPT account worth far more on grey market
ccerrato147 · x · 2026-09-18
A security researcher criticized OpenAI for not taking cybersecurity seriously: a compromised ChatGPT account connected to a company's GitHub, Slack, and email is worth orders of magnitude more than $6,500 on the grey market — exposing model weights, source code, and private communications. The researcher argues OpenAI got the friendliest possible version of this attack yet paid the finders pocket change, and should hire competent security staff and raise bounties.
More from Safety
- Hundreds of offensive ARTEX AI agents deployed across VPS providers, hitting Korean banks — IgorCarron · 2026-11-04
- UK NCSC: AI will speed up and scale existing cyber attacks, not create new ones — koltregaskes · 2026-11-04
- Anthropic says it may imminently hit RSP threshold for AI-accelerated R&D, releases provable inference work — tobyordoxford · 2026-11-04
- Hackers reset French blood service freezers from -30°C to 110°C in supply-chain cyberattack — LuizaJarovsky · 2026-11-04
- Google says it removed post-employment non-disparagement clauses from new-hire terms — HaydnBelfield · 2026-11-04
- Claude doesn't really forget: Anthropic's privacy policy allows records retention up to 7 years — nikola_mr64990 · 2026-11-04