Photo via CBS News

AI security experts say they used Claude to hack ChatGPT

Read the original at CBS News ↗
Cite

Cerullo, M. (2026, September 18). AI security experts say they used Claude to hack ChatGPT. CBS News. https://www.cbsnews.com/news/claude-hack-chatgpt-anthropic-openai/

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

CBS News · collected 2026-09-18 · by Megan Cerullo

Quick Summary

Hacktron AI security researchers used Anthropic's Claude platform to exploit vulnerabilities in OpenAI’s ChatGPT, gaining access to an employee’s account within 72 hours and retrieving sensitive information including source code storage details. The breach was reported to OpenAI, which addressed the issue swiftly and offered a $6,500 bounty for disclosing the vulnerability. This incident highlights growing concerns over AI security as leading developers advocate for slower development due to potential risks.
Written by AI on 2026-09-18, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

In September, cybersecurity researchers at Hacktron AI used Anthropic’s Claude chatbot to breach OpenAI’s internal systems, gaining access to employee accounts and an internal GitHub repository. The researchers discovered a flaw in OpenAI's public help forum hosted by Discourse, which they exploited within 72 hours. They reported the issue immediately, and OpenAI fixed it within 14 hours while paying Hacktron a $6,500 bounty. The incident highlights how quickly AI can be repurposed for cyberattacks, despite efforts to ensure ethical use through bug-hunting programs like this one.

Written for “AI Breach Risks” on 2026-10-31, grounded in this article and the 7 other(s) covering the same event.

Story

📰 AI Breach Risks
Technology · 8 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 12% of its claims. Each row says how that neighbour differs.
CBS News
Hedges 0 of 3 claims Outlet record 66/100
The Straits Times
Hedges 0 of 15 claims Outlet record 66/100
The Guardian
⚖️ Leans right Hedges 2 of 15 claims Outlet record 66/100
BBC News
⚖️ Leans left Hedges 3 of 19 claims Outlet record 68/100
“Article A discusses six safety issues revealed by OpenAI, while Article B reports on a hack of ChatGPT using Claude, which are different incidents.”
New York Post
Hedges 0 of 11 claims Outlet record 66/100
“Article A discusses OpenAI's new framework for tracking AI misalignment, while Article B reports on a security breach where researchers used Claude to hack into ChatGPT.”
Global News
Hedges 2 of 27 claims Outlet record 63/100
“Article A discusses six reported incidents of AI misalignment by various models, while Article B reports a specific hacking incident involving Claude and ChatGPT conducted by security researchers.”
Semafor
⚖️ Centre Hedges 0 of 4 claims Outlet record 60/100
Washington Examiner
⚖️ Leans left Hedges 9 of 42 claims Outlet record 70/100
“Article A discusses multiple incidents where AI agents hacked during security evaluations, while Article B specifically mentions a hack of ChatGPT by Hacktron AI using Claude.”
NBC News
Hedges 2 of 19 claims Outlet record 60/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
16
sentences that state something as happening or true
Uncertain
12%
2 of 16 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
CBS News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
8
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-18 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

CBS News · 4259 article(s) · 6 correction(s) detected
Running correction rate · 6 correction(s)

Who wrote this

Megan Cerullo
29 article(s) here · 1 carrying a prediction
🔮 Advances in artificial intelligence are making it a cinch to create so-called , videos and audio recordings, raising concerns that bad actors could bombard people with hyper-realistic scams and spread disinformation.
🔮 Wendy Mayo knows firsthand how expensive and time-consuming caring for an aging parent can be.
🔮 Walmart said on Wednesday that its "holiday meal basket" this year, which feeds 10 individuals, will cost $35, or $3.50 per person.
🔮 "There's a world of difference between user-authorized agents (Muse, Instinct, Grokbot, etc.) and true unauthorized/rogue agents that could constitute cyberattacks," he said.
🔮 Assuming a family spends $24,000 annually on childcare, it would need to earn roughly $343,000 to remain below the 7% threshold.
🔮 Holiday retail sales this year are expected to top $1 trillion for the first time, according to a forecast from the National Retail Federation.
2026-10-20 · speculative framing · Amazon to hire 300,000 workers for seasonal jobs this year
🔮 Walmart is betting that low prices and discounts will draw cash-strapped Americans into its stores.
🔮 Such certificates or licenses demonstrate "specific skills that will put you ahead of other candidates," she told CBS News.
🔮 Financial security among U.S. employees dropped from 46% to 36% in 2026, its lowest level in seven years, according to a survey of 6,000 U.S. employees by benefits company Willis Towers Watson (WTW).
🔮 AI companies are facing a dilemma between promoting the technology's capabilities as more experts are about the dangers the tech could pose to society.
Also by Megan Cerullo
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 29 articles by Megan Cerullo →

Topics

Anthropic ChatGPT Claude Hacktron AI OpenAI

Subjects

OpenAI ORG · 9× Hacktron AI ORG · 4× Anthropic ORG · 3× CBS News ORG · 1× Community ORG · 1× Dario Amodei PERSON · 1× Discourse ORG · 1× Hacktron ORG · 1× Journal ORG · 1× The Wall Street Journal ORG · 1×

Narrative

Software security researchers used Anthropic's Claude AI platform to hack OpenAI's ChatGPT tool, adding to mounting concerns about the vulnerability of leading large language models to cyberattacks.
framing: assertive · carried by 1 article(s) · first seen 2026-09-18
🔮 The breach comes as AI's capabilities and vulnerabilities have been thrust into the spotlight, with leading tech developers calling for a slowdown in building AI platforms due to concerns that they could harm people.
2026-09-18 · CBS News
AI security experts say they used Claude to hack ChatGPT · assertive framing

Claims (16 extracted, 2 hedged)

Software security researchers used Anthropic's Claude AI platform to hack OpenAI's ChatGPT tool, adding to mounting concerns about the vulnerability of leading large language models to cyberattacks. asserted
researchers → use → cyberattacks
Researchers from Hacktron AI, an independent AI security platform that tests software code, disclosed the breach in a blog post on Sunday. asserted
that → test → Sunday
They said they used Claude to gain access to an OpenAI employee's ChatGPT account, enabling Hacktron AI to retrieve key data on where the source code was stored and managed. asserted
code → say → data
They also accessed an OpenAI discussion forum. asserted
They → access → forum
"The entire timeline from initial discovery to access to OpenAI repo access took place in less than 72 hours," Hacktron AI said in the post. asserted
AI → take → post
The Hacktron AI team reported the intrusion to OpenAI, which responded promptly and paid researchers a $6,500 bounty, Hacktron AI said in its blog post. asserted
AI → report → post
"We immediately reported the initial vulnerability to OpenAI and Discourse and worked with them to coordinate the patch. asserted
We → report → patch
We appreciate their attention to detail and fast resolution of this issue," the researchers wrote. asserted
researchers → appreciate → issue
The incident was first reported by The Wall Street Journal. asserted
incident → report → Journal
"We thank the researchers for contacting us and sharing their findings. asserted
We → thank → findings
We narrowed the permissions on Community sign-in tokens and revoked affected tokens and sessions," OpenAI said, according to the Journal. uncertain
OpenAI → narrow → Journal
Anthropic and OpenAI did not immediately respond to requests for comment. asserted
Anthropic → respond → comment
The breach comes as AI's capabilities and vulnerabilities have been thrust into the spotlight, with leading tech developers calling for a slowdown in building AI platforms due to concerns that they could harm people. uncertain
they → come → people
In July, OpenAI revealed that its bots had collaborated to , Hugging Face, after escaping a testing environment. asserted
bots → reveal → environment
In a recent interview with CBS News, Anthropic CEO Dario Amodei said "slow the pace" of AI development. around AI, citing the Hugging Face hack as a warning sign. asserted
Amodei → say → sign
In a Sept. 12 essay, he also wrote that the entire tech industry must work together to asserted
industry → write → essay
💬Give feedback
🕘History 🎫Support