Breaking News – Cyber Threats (last 6h)
Generated: 2026-09-19 13:00 PDT
- Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
The Hacker News • 2026-09-19 11:36 • thehackernews.com
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.The chain began with a bug in the software that runs OpenAI’s public help forum and moved through a weakness in OpenAI’s own login system.
This was security research,
https://thehackernews.com/2026/09/claude-opus-5-helped-researchers-take.html - BragJack attacks hijack AI browser agents through malicious extensions
BleepingComputer • 2026-09-19 07:56 • www.bleepingcomputer.com
BragJack, a proof-of-concept attack from Forever Security’s Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs. […]
https://www.bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/ - North Korean WaterPlum hackers infected 30,000 devices worldwide
BleepingComputer • 2026-09-19 07:05 • www.bleepingcomputer.com
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. […]
https://www.bleepingcomputer.com/news/security/north-korean-waterplum-hackers-infected-30-000-devices-worldwide/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
