Market & Regulation
Hacktron breaches OpenAI with Claude in 72 hours
The Rundown AIhigh confidence
Why it matters
- →AI models can now autonomously chain vulnerabilities to breach major tech companies.
- →Small teams with standard API access pose significant security risks to AI labs.
- →The incident highlights critical gaps in internal codebase protection against LLM-driven attacks.
Security startup Hacktron revealed it breached OpenAI's private codebase in less than 72 hours using Anthropic's Claude model to automate the attack. The team exploited an image-upload vulnerability on OpenAI's community forum, which allowed them to steal staff sign-in tokens and access ChatGPT accounts. They left a proof-of-concept edit in internal documentation and reported the flaw for a $6,500 bug bounty. Hacktron noted that similar flaws affected Slack, Meta, and GitHub Enterprise, highlighting broader industry risks.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1Anthropic AI Models Breach Systems in Security Tests
TechCrunch AI · July 31, 2026 · Same story
- 2Anthropic's AI Models Breach Systems in Cybersecurity Tests
WIRED AI · July 31, 2026 · Related
- 3Anthropic's Claude AI Models Breach Real Systems
The Verge AI · July 31, 2026 · Same story
- 4AI Agents from Anthropic and OpenAI Go Rogue
The Rundown AI · August 5, 2026 · Related
- 5Hackers Exploit Claude Tokens, Users Affected
TechCrunch AI · September 8, 2026 · Same story
- 6Anthropic Reveals Global Misuse of Claude AI
The Rundown AI · September 11, 2026 · Related
- 7Anthropic Reports Misuse of Claude AI in Cybercrime
WIRED AI · September 12, 2026 · Related
- 8OpenAI model hacks external systems, sparking safety crisis
The Verge AI · September 17, 2026 · Related
What happened next
- 9AI Agents Hacking for Answers Raises Safety Alarm
MIT Technology Review AI · September 23, 2026 · Related
- 10Anthropic's Claude Finds Critical Exploits in Browsers and Windows
Lev Selector · October 30, 2026 · Related
- 11Major AI security incidents and vulnerabilities
Fireship · November 3, 2026 · Related
Follow this story
Open the full story →Claude Opus 5 used to hack OpenAI via Discourse
3 developments
- Sep 18 · TechCrunch AI
Claude Opus 5 used to hack OpenAI via Discourse - Sep 18 · The Verge AI
Hackers use Claude to breach OpenAI infrastructure - Sep 21 · The Rundown AI
Hacktron breaches OpenAI with Claude in 72 hours (This article)
More from The Rundown AI
© The Rundown AIResearchresearch
METR: Anthropic's AI progress doubled internally
A METR report based on 11 weeks of internal access reveals Anthropic’s development pace has roughly doubled, driven primarily by its own AI systems. This finding suggests the recursive self-improvement loop is already active inside one of the leading labs, challenging public narratives about cautious frontier pacing. With no clear bottlenecks identified and progress accelerating at a 1.3x to 3x rate, the gap between internal capability and public release widens significantly. The report reveals two internal models outperforming current top-tier releases, signaling that safety concerns may be lagging behind technical velocity. KleidiAI on Apple Silicon now compiles by default, meaning every M-series machine gets ARM-tuned GEMM kernels for free, no flag-flipping required. With ROCm 7.2 added as a default build, AMD GPU users stop being second-class citizens for local inference — the gap with CUDA narrows visibly. There's no new model and no new quantization here — just llama.cpp quietly becoming the inference runtime for everyone who isn't on NVIDIA. That's the headline.
The Rundown AI
© The Rundown AIAgentsagents
Grok Bot gains voice agent capabilities for phone calls
SpaceXSI’s Grok Bot now handles live phone calls, marking a shift from text-based assistants to autonomous voice agents capable of negotiating bills and booking appointments. The system operates via temporary numbers, allowing users to intervene mid-call if the bot encounters complex queries, while legally designating the human as the caller of record. This moves AI interaction out of the screen and into real-world logistics, testing the limits of agentic reliability in unstructured environments. It signals that voice is becoming a primary interface for automated task completion, not just conversation.
The Rundown AI
More in Market & Regulation
© TechCrunch AIMarket & Regulationbusiness
Google buys Crusoe's Wyoming data center project
Google is acquiring an unfinished data center from Crusoe in Wyoming, signaling a strategic pivot to direct infrastructure control amid scaling pressures. The $17 billion investment highlights the immense capital required for AI compute, as independent developers struggle with cost and timeline overruns. This move illustrates the growing vertical integration of tech giants into physical infrastructure, reducing reliance on third-party providers like Crusoe for massive deployments. By taking ownership, Google bypasses the bottlenecks that often plague external development teams. The deal reflects a broader industry trend where hyperscalers reclaim control over their most critical assets. Independent builders now face stiffer competition from companies with deeper pockets and direct operational oversight.
TechCrunch AI
© TechCrunch AIInvestment · $11B
Market & Regulationbusiness
OpenAI raises $11B at $1.25T valuation
OpenAI is securing an additional $11 billion in a funding round that values the company at $1.25 trillion, falling short of its initial $30 billion target but still signaling massive investor confidence. This latest capital injection comes as the broader AI market faces headwinds, with Anthropic’s potential IPO valuation also cooling from earlier highs. The move highlights OpenAI's continued ability to attract deep-pocketed support despite regulatory uncertainties and political shifts affecting data center expansion. While the round hasn't fully closed, the sheer scale of this valuation reinforces OpenAI's dominant position in the race for AI supremacy. Investors are betting big on the lab's ability to maintain its lead in compute and model capabilities. The delay in IPO plans suggests a strategic pause to navigate these complex market conditions. This funding ensures OpenAI remains the financial heavyweight in the sector.
TechCrunch AI
© The AI Daily BriefMarket & Regulationbusiness
Enterprise AI Spending Surges 5x Year-Over-Year
Menlo's latest report reveals enterprise AI spending has increased nearly five times in one year, primarily driven by the adoption of AI agents.
The AI Daily Brief