AI Model Exploits Chained Flaws to Breach OpenAI Staff Accounts

Researchers exploited a chain of flaws over 72 hours, beginning with a vulnerability in a library used to parse HEIC and HEIF images, to breach several OpenAI staff accounts and gain access to an internal code repository. The attack highlights how an image-processing bug can serve as an unexpected entry point into an AI company's internal systems.

In just 72 hours, researchers exploited a chain of flaws - starting with a bug in image-processing software - to breach several OpenAI staff accounts and gain access to an internal code repository. The surprising attack began with a vulnerability in a library used to parse HEIC and HEIF images, highlighting the potential for unexpected entry points.