OpenAI just hired the security firm that broke into it. On November 6, Hacktron — the researchers who chained a community forum RCE with an SSO flaw to reach OpenAI’s internal GitHub repos — became its official red-team partner. The move is a blunt acknowledgment that AI integrations have created an attack surface that standard bug bounty programs can no longer cover alone. The Exploit That Earned Them a Job Offer On July 25, Hacktron researchers chained two vulnerabilities. First: a remote code execution flaw in the image-processing pathway of OpenAI’s Discourse-hosted community forum. Second: an OpenAI SSO weakness that […]
The post
source & further reading
byteiota.com — original article
Together Compiler: AI Agents Rewrite GPU Inference Code
Foundry Local + Qwen3.8-27B: Run GitHub Copilot Offline
Claude Code 2.1.319: Fix Headless Agent Freezes With denyInsteadOfPrompting