Hackers used Claude to breach OpenAI

SPEAKER_1 (0:00)

At Edward Jones, we believe rich is more than caring about the latest and greatest. It's also taking care of what gives your life meaning. That's why your dedicated financial advisor meets you where you are, with personalized financial strategies that help protect what matters, so you can preserve your progress while creating a path forward. The key to being rich is knowing what counts. Let's find your rich together.

Edward Jones, member SIPC.

SPEAKER_2 (0:30)

Chronic migraine is 15 or more headache days a month, each lasting four hours or more.

SPEAKER_3 (0:34)

Botox, on a botulinum toxin A, prevents headaches in adults with chronic migraine before they start. It's not for those with 14 or fewer headache days a month. It prevents on average eight to nine headache days a month, versus six to seven for placebo.

SPEAKER_4 (0:47)

Prescription Botox is injected by your doctor. Effects of Botox may spread hours to weeks after injection causing serious symptoms. Alert your doctor right away as difficulty swallowing, speaking, breathing, eye problems, muscle weakness can be signs of a life-threatening condition. Patients with these conditions before injection are at highest risk. Side effects may include allergic reactions, neck and injection site pain, fatigue, and headache. Allergic reactions can include rash, welts, asthma symptoms, and dizziness. Don't receive Botox if there's a skin infection. Tell your doctor your medical history, muscle or nerve conditions including ALS, Lou Gehrig's disease, myasthenia gravis, or Lambert-Eton syndrome, and medications including botulinum toxins, as these may increase the risk of serious side effects.

SPEAKER_2 (1:24)

Why wait? Ask your doctor, visit botoxchronicmigraine.com or call 1-800-44-BOTOX to learn more.

SPEAKER_5 (1:31)

This episode is brought to you by Google Chrome. You think you know a browser, but Gemini and Chrome, that's new. It can help you with practically anything on the web, like restoring a vintage motorcycle from a 50 page restoration blog, or finally break down that long article you've had open for weeks. Gemini and Chrome is here for it. Ready to make anything online make sense? There's no place like Chrome. Check responses set up required, compatibility and availability varies 18 plus.

SPEAKER_6 (1:56)

Parish Jaiswal, Mohan Sriram, Krishna Pedapati and Rahul Maini. They operate as a security team called Hacktron AI.

Successfully breached the internal systems of OpenAI. They secured remote code execution right inside the corporate environment, and they built the entire exploit chain from start to finish using Anthropics Claude.

SPEAKER_7 (2:18)

Which is just, I mean, the irony there is incredible. You have two organizations competing for total dominance in artificial intelligence, and the flagship product of one company is functioning as the literal lockpick for the other. It's a highly specific kind of friendly fire.

SPEAKER_6 (2:31)

Yeah, they basically just asked the rival model how to break the primary model's corporate security, and it handed them the blueprints. Yeah. It really forces a mechanical evaluation of how security actually functions inside these supposedly impenetrable frontier environments.

SPEAKER_7 (2:45)

Right, because the central mystery of this whole sequence is the architecture. Getting from a public message board to the core engineering environment is, well, you usually assume those two things are separated by layers of internal firewalls and totally isolated networks.

SPEAKER_6 (2:58)

You would think so, but the entry point was just this hidden flaw in an open source image processing package called Libhive. OpenAI runs its community forum on discourse, and discourse uses that specific library to process high efficiency image files.

SPEAKER_7 (3:15)

And just to clarify, the original developers of that library actually knew about the bug, right? Like a patch existed in their upstream repository.

SPEAKER_6 (3:22)

Exactly. They fixed the code, but they failed to flag the update as a security issue. It was just categorized as a routine bug fix. Because it lacked that specific security designation, the forum software didn't prioritize pulling the update. Discourse just kept running the vulnerable version, totally unaware.

SPEAKER_7 (3:40)

That is a classic supply chain failure. You rely on a platform. That platform relies on an open source dependency, and a mislabel ticket somewhere in that chain leaves your entire infrastructure exposed.

SPEAKER_6 (3:49)

Yeah, and the mechanics of the exploit are pretty straightforward if you know memory corruption. The researchers just uploaded a carefully crafted ATIC image file to the public forum.

When the server tried to unpack that image using the outdated library, the data was maliciously dense, and it triggered a heap overflow.

SPEAKER_7 (4:07)

Right, so for anyone who hasn't dealt with memory allocation, think of computer memory like a row of mailboxes. The system tells the image processor it can only use boxes one through five.

But the image is structured, so the data spills over into box six, seven, and eight.