Hackers took over OpenAI employee ChatGPT accounts in 72 hours, got ~$6,500 bounty
NathanpmYoung · x · 2026-09-19
Security researchers (S1r1u5) disclosed that on July 25 they chained two bugs to take over ChatGPT/Codex accounts of OpenAI employees and unaffiliated users, reaching connected services like Outlook, Slack, and GitHub — proven via a PR in OpenAI's internal codebase, in under 72 hours. Reposting, tracewoodgrains notes the bounty came in at over $6,500, well below expectations given the severity, a pointed critique of OpenAI's security response.
More from Companies & People
- Replit's User Ops lead built an AI app to prioritize and route support tickets — amasad · 2026-11-04
- John Lewis's worst-reviewed Christmas ad: why it wants to stop cash gift cards — aakashgupta · 2026-11-04
- Datasite CTO on ditching in-house parsing: better parsing lifted recall 22% — AI Engineer · 2026-11-04
- Technical founders: as CEO, storytelling is the core job you can't skip — paigeinsf · 2026-11-04
- Andreessen: Agents Are Entering Enterprises as Chaos, Just Like PCs and Spreadsheets Did — Dan_Jeffries1 · 2026-11-04
- DeepMind, Cognition host bouldering social ahead of AI Engineer Code Summit — osanseviero · 2026-11-04