SemiAnalysis · @SemiAnalysis_ · X·2026-09-19 08:15·34分钟前
AI 导读

黑客团队于 7 月 25 日用两个漏洞在不到 72 小时内接管了 OpenAI 员工及部分外部用户的 ChatGPT/Codex 账号,并可访问关联的 Outlook、Slack、GitHub 等服务,还通过在 OpenAI 内部代码库提交 PR 证明了漏洞。

SemiAnalysis@SemiAnalysis_
65AI 编辑部评分,满分 100
2026-09-19 08:15· 34分钟前
AI 导读

黑客团队于 7 月 25 日用两个漏洞在不到 72 小时内接管了 OpenAI 员工及部分外部用户的 ChatGPT/Codex 账号,并可访问关联的 Outlook、Slack、GitHub 等服务,还通过在 OpenAI 内部代码库提交 PR 证明了漏洞。

RIDICULOUS: a $6500 bug bounty for something this serious is OFFENSIVE. These guys are going to make more $ on their X creator payouts than they'll get from OpenAI. Let's talk about bounties. (1/9)🧵 https://x.com/S1r1u5_/status/2100777801335095383?s=20

s1r1usOn July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outl...

来源:SemiAnalysis· x.com