Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws (The Hacker News)
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository. The chain began with - SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE (The Hacker News)
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE - Friday Squid Blogging: On Squid Egg Sacs (Schneier on Security)
Short essay about squid egg sacs. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy. - Are AIs Still Struggling with CAPTCHAs? (Schneier on Security)
Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude. In the transcript, the Claude model that is so powerful that Anthropic is gatekeeping access to it appeared to slam its virtual he - Data Broker Radaris Loses Domains in Privacy Fight (KrebsOnSecurity)
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alle
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →