Claude couldn’t hack OpenAI. Then Anthropic shipped Opus 5.
The New Stack 1 month ago 19 ● 23 sources
Hacktron AI security researchers used Claude Opus 4.8 to turn a libheif memory-corruption bug into a working ARM64 exploit against a Mac and then achieved remote code execution on a test forum, before escalating to proof of access in OpenAI’s private monorepo via an employee Codex account. Roughly 72 hours after they began, they read OpenAI’s private openai/openai monorepo and opened a README pull request. OpenAI narrowed permissions for community sign-in tokens and revoked the affected tokens and sessions, while the incident also prompted revisions based on the new Opus 5 capability in exploit development.