Hacktron founder @S1r1u5_ says AI may make cyber offense more dominant because defenders have to secure everything while attackers only need one employee, one browser bug, or one forgotten codebase: "There is this information asymmetry where defenders have all the information about what an attacker could do. They have access to their source code. But there's one more asymmetry, which is the attacker only needs to break one link in the chain. Just like how we did." "Even though OpenAI is…

S1r1u5_@S1r1u5_21h ago

On July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc. We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵 https://t.co/gVsmQZwSc8