AI Coding Live News — Real-Time 𝕏/Twitter Updates & Breakthroughs

👀18

🔥83

OpenAI Plans Its Next Internal Security Sprint With Cathedral, More Than Quadruples Critical Bug Bounty Rewards to Up to $172,000

On November 2 (US time) OpenAI said it is planning its next internal security sprint and partnering with security firm Cathedral, whose researchers will use OpenAI models alongside OpenAI teams to challenge its defenses. It is also changing its Security Bug Bounty program, more than quadrupling rewards for critical findings; OpenAI's X post says exceptional findings can earn up to $172,000 including bonuses. Per OpenAI, the last sprint dedicated 25% of its product engineers to finding and fixing weaknesses, using Codex to reproduce vulnerabilities and prepare patches, and it has committed $1 billion in subsidized access over six months for frontline defenders.

Key Takeaways

Critical bug bounty rewards are more than quadrupled; per OpenAI's X post, exceptional findings can earn up to $172,000 including bonuses.
Researchers from partner Cathedral will use OpenAI models alongside OpenAI teams to test its defenses.
Per OpenAI, the last sprint dedicated 25% of product engineers and used Codex to reproduce vulnerabilities in isolated environments and prepare patches.
OpenAI has committed $1 billion in subsidized access over six months for defenders of essential services and digital infrastructure.
Timing, scope and finding counts for the next sprint were not disclosed.

Read full story

Linked Models & Agents:

⚡ Codex🤖 Codex 🌐 OpenAI 🌐 Cathedral

#OpenAI#security sprint#bug bounty#Cathedral#Codex#Daybreak#Cybersecurity

Will Depue@willdepue·Collected 7d ago

👀47

🔥81

View on 𝕏 ↗

X discussion: former OpenAI researcher Will Depue says Anthropic is "massively underplaying" the Cathedral security test, drawing about 2,000 likes and 180K views

Will Depue, whose X bio says he previously worked at OpenAI on Sora 1 and 2 and on o3/4o post-training, posted on Oct 28 that Anthropic is "massively underplaying" the recent security incident and that he is "hearing" Cathedral got full administrator access to the company Slack workspace. The post drew about 2,000 likes, 600+ bookmarks and roughly 180K views. This is an unconfirmed secondhand claim; Anthropic told reporters the researchers reached only a limited set of sales, HR and IT systems and did not touch Claude conversations, source code or model weights.

Key Takeaways

Will Depue's post: Anthropic is massively underplaying the incident, and he is hearing Cathedral got full administrator access to the Slack workspace, able to see every message and log in as arbitrary users
His argument: Anthropic and OpenAI keep nearly all research discussion in Slack, so access tokens held by third-party apps become the weakest link
Anthropic's statement to The Washington Post: only a limited set of sales, HR and IT systems were reached, Claude conversations, source code and model weights were not accessed, and access was cut the same day
Cathedral's draft report says its AI agents found paths into internal systems through third-party administrative and sales software in under 12 hours
The full-admin-access claim is Depue's secondhand account and has not been publicly confirmed by Anthropic or Cathedral; the post has about 2,000 likes and roughly 180K views

Read full story

Linked Models & Agents:

⚡ Claude🌐 Anthropic 🌐 Cathedral 🌐 Slack

#X discussion#Anthropic#Cathedral#Security#Slack#supply chain#bug bounty#AI agents