Researchers Breached OpenAI Staff Accounts via SSO Bug, Got $6,500 Bounty
kevinnbass · x · 2026-09-19
- Security researchers disclosed a Discourse SSO bug that could compromise OpenAI employees' ChatGPT and Gmail accounts.
- OpenAI patched it 14 hours after submission; Discourse fixed it within two days. The team was awarded $6,500.
- The original poster mocks the payout: a $1.2T company paying less than a McDonald's manager's monthly salary, arguing OpenAI doesn't take cybersecurity seriously.
More from Safety
- Binance breach criticized: DPRK fake-recruiter malware tactics were publicly documented for years — AccBalanced · 2026-11-04
- OffsecCyber dataset combines HackerOne reports and CVEs to train pentesting LLMs — AccBalanced · 2026-11-04
- Abliterated GLM-5.3 pulls off red-team exploit in 3:41 for $0.02, stock model refuses — bratton · 2026-11-04
- AI industry bet on both parties: $55M+ spent this election cycle via dual PACs — ChrisGPT · 2026-11-04
- Valid tokens, allowed actions, zero intent checks: the agent security gap nobody solves — Cytersmyz · 2026-11-04
- Princeton paper: harsher penalties can make AI auditors inspect less — Few-Decision6287 · 2026-11-04