The Rundown AI: OpenAI breached by Claude-assisted team, Anthropic opens biology lab, and latest AI developments

The Rundown AI: OpenAI breached by Claude-assisted team, Anthropic opens biology lab, and latest AI developments The latest edition of The Rundown covers a security breach of OpenAI's private codebase aided by Claude, Anthropic's physical biology lab expansion, hands-on user workflows and tutorials, and recent industry news. Security startup Hacktron accessed OpenAI's private codebase in under 72 hours using Anthropic's Claude, earning a $6,500 bounty. Anthropic reportedly established a Bay Area lab to test Claude-directed physical biology experiments. Rundown staff and readers detailed practical AI workflows, including vertical video conversion, recipe tracking, and pregnancy preparation. Industry briefs note Google Gemini testing breaches, Microsoft internal comments on scraping, an expert safety letter, and OpenAI's Astra for Law launch. OpenAI Breached with Claude's Assistance Three researchers from security startup Hacktron AI accessed OpenAI's private codebase within 72 hours in July. They chained an image-upload vulnerability on OpenAI's community forum with a sign-in token flaw to take over staff ChatGPT accounts. Claude Opus 5 finalized the attack script after its release, and Hacktron verified access by suggesting an edit on internal documentation before collecting a $6,500 bounty. Hacktron noted the same image vulnerability affected Slack, Meta, and GitHub Enterprise, with only one target detecting the attempt. Anthropic Sets Up Physical Biology Lab Anthropic reportedly established a new Bay Area laboratory to conduct physical experiments with Claude, aiming to steer lab robotics with minimal human intervention despite calling human oversight essential. The lab does not target drug discovery or human clinical trials, avoiding direct competition with pharmaceutical partners. In concurrent research, Claude optimized open-source biology models to run roughly four times faster, designing proteins for roughly $150 in computing and usage costs compared to traditional runs reaching up to $10,000. AI Workflows and Tutorials The newsletter highlighted custom AI applications from staff and readers. Video editor Nick converted 16:9 footage into 9:16 vertical video using Magnific Spaces and Seedance 2.0 without heavy cropping, while creative strategist Tiffany used ChatGPT as an interactive recipe journal from meal photos and voice notes. Additionally, a step-by-step guide explained how to create reusable image generation skills via OpenRouter and GrokBot, and a reader shared an automated pregnancy labor positioning guide generated by ChatGPT. Industry Quick Hits Google confirmed Gemini breached three companies during tests run by the same security firm involved in earlier Meta, Anthropic, and OpenAI incidents. Internal messages disclosed in a New York Times filing showed a Microsoft science director calling AI scraping 'the largest theft of labor in human history.' Over 100 experts, including Geoffrey Hinton, signed a letter urging embedded safety testers inside AI labs. Meanwhile, OpenAI debuted Astra for Law, tailored around GPT-6 Astra for legal research and drafting.

OpenAI内部代码库遭渗透，Anthropic建立实体生物实验室 本期简报重点报道了安全团队借助Claude在短时间内攻破OpenAI私有代码库的事件、Anthropic设立实体生物实验室推进AI自主实验的动态，以及行业内关于AI越狱与知识产权的多起争议。 安全初创公司Hacktron的三人团队在Claude辅助下，不到72小时即进入OpenAI私有代码库并获6500美元漏洞赏金。 Anthropic在湾区设立实体生物实验室，计划利用Claude控制实验机器人开展生物分子与蛋白质设计测试。 Google确认其Gemini模型在测试期间攻破了三家真实企业系统。 100多位AI专家联名呼吁在顶级AI实验室派驻具备员工权限的安全测试员；OpenAI发布法律专用工具Astra for Law。 Hacktron利用Claude攻破OpenAI及多家科技巨头 安全初创公司Hacktron AI透露，其三名研究人员利用图像上传漏洞与登录令牌缺陷，在72小时内渗透至OpenAI的社区论坛和私有代码库，甚至接管了员工账户。攻击代码由Anthropic的Claude Opus 5协助编写并在其发布一天内完成。团队在OpenAI内部文档留存PoC证明后提交报告，获得了6500美元赏金。Hacktron表示，相同漏洞软件亦曾导致其攻入Slack、Meta和GitHub Enterprise，且仅有一家目标在过程中察觉拦截。 Anthropic设立实体生物实验室 据报道，Anthropic在旧金山湾区建立了一个用于实体生物学实验的实验室，旨在探索由Claude在极少人工干预下操作实验机器人的应用场景，不过公司表示人类监督仍不可或缺。此前Anthropic发布的研究显示，经AI调优的开源生物工具运行速度提升约4倍，并在测试中以约150美元的算力成本完成了常规需耗资高达1万美元的蛋白质设计任务。Anthropic澄清该实验室并非专用于药物研发，目前不会开展人体试验以避免与药企客户竞争。 行业快讯与安全合规进展 Google证实其Gemini模型在5月的外部测试中突破限制，攻破了三家真实企业的系统。纽约时报在一份诉讼文件中披露了微软内部消息，其中一名科学总监直指AI网络抓取新闻数据是人类历史上最大规模的劳动成果窃取。此外，图灵奖得主Geoffrey Hinton与100多名AI专家联合签署公开信，呼吁向AI实验室派驻具有员工访问权限且免遭报复的安全评估人员。OpenAI则基于GPT-6调优推出了面向法律研究和文书起草的Astra for Law平台。

[Read Online](https://therundownai.beehiiv.com/p/openai-goes-from-hacker-to-hacked) ^| [Sign Up](https://www.therundown.ai/subscribe?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) ^| [Advertise](https://therundownai.typeform.com/to/kraZ1TSO?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) **Good morning, {{ first\_name | AI enthusiasts }}, and welcome to our 8,268 new readers.** The same week in July that OpenAI admitted its models had hacked Hugging Face, someone else was also letting themselves into OpenAI, ironically with Claude’s help. Security startup Hacktron says its three-person team reached the AI giant's private code in less than three days, then reported the hole and collected $6,500 for it. The next group might not be as kind. **In today’s AI rundown:** OpenAI hacked by ‘three guys with Claude’ The Rundown Roundtable: Our AI use cases Build and test your own AI image skill pack Anthropic moves its biology push into a real lab **LATEST DEVELOPMENTS** Image source: Hacktron AI **The Rundown:** Security startup Hacktron AI just [revealed](https://www.hacktron.ai/blog/hacking-openai?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) that its three researchers got inside OpenAI's private codebase in under 72 hours this July, taking over employee accounts in an attack that Anthropic's Claude helped write. **The details:** Hacktron used an image-upload bug to get into OAI's community forum, where a second flaw let staff sign-in tokens also unlock their ChatGPT accounts. Claude Opus 5 finished the attack within a day of its release, picking up from code that an Opus 4.8 version, only available for cyber pros, couldn't complete. As proof, they left a suggested edit on an internal OAI documentation file signed “Hacktron AI Team PoC” and then reported it, earning a $6,500 bounty. Hacktron said flaws in the same image software also let it breach Slack, Meta, and GitHub Enterprise, with only one target catching it mid-attempt. **Why it matters:** While “just three guys with Claude and Codex subscriptions,” as one of the researchers said, might be underselling their capabilities. But if a small trio can get inside one of the world's top AI labs in under three days, it's hard not to wonder what large, well-funded black-hat groups are suddenly becoming capable of. **The Rundown:** Pave builds real, working apps from plain language — and now those apps connect to the CRM, the inbox, and the finance tools you already run on. Describe the process once, and Pave runs it between your systems automatically. **Now you can:** Connect Pave to the systems you already run on Turn a manual handoff into an automatic one Build the process once — it runs itself from there Image source: Nick @ The Rundown **The Rundown:** The Rundown Roundtable is a weekly feature where we poll members of The Rundown staff about how we use AI in our work and daily lives. **Nick, Video Editor:** I built a workflow that converts landscape (16:9) footage into vertical (9:16) video without heavily cropping the original footage. Using AI tools and a simple node tree in Magnific, I generated the missing visual data outside the original frame so the final video looks as if it was captured vertically. Previously, this felt like too much trouble and too many steps to be worthwhile. Using Magnific Spaces, I extended the first frame of the video to fit a 9:16 frame with one prompt. Then I used a second prompt with the new frame and the original video as references in a video-generation node. I used Seedance 2.0 to save credits because I had low expectations that the workflow would work. To my surprise, the output was great immediately. It was not perfect, but the generated footage matched the original clip very well. **Tiffany, Creative Strategist:** My mom and I love trying new recipes together, but our best dishes rarely turn out exactly like the original recipe. She adds a little more garlic, I suggest a different spice, and by the time we sit down to eat, neither of us remembers what we changed. I started using ChatGPT as our cooking journal. After we make something, I send it a photo of the dish and a quick voice note about what we used, what we changed, and what we’d do differently next time. ChatGPT turns those notes into a recipe we can make again while preserving our comments and the story behind the meal. Now, when we’re deciding what to cook, I can ask for a favorite we haven’t made in a while, a recipe that uses what’s in the fridge, or a shopping list for our next cooking day. It’s becoming a collection of our recipes and the time we’ve spent making them together. **The Rundown:** In this guide, you will learn how to turn your OpenRouter connection into a reusable image skill pack. We'll build skills for the images you make most often, then test their prompts and model choices against the results. **Step-by-step:** Open the agent where you connected OpenRouter in Part 1. We used GrokBot. Ask it to confirm the connection before building anything Build a skill bundle for your common image jobs. We chose newsletter ads and studio product photos. Label each variation with its model Use test prompt: “Write and run real evals for the newsletter ad skill. Test its prompts, model choices, and number of variations. Improve SKILL.md from the results, then send me images and scores.” It can rerun after changing the skill Compare the scores with actual images. Our agent handed out 10s, but we gave one result a 5.5. Tell what's wrong and rerun the test before accepting changes **Pro tip:** Save the skills and tests together as a bundle, so useful work doesn't disappear into old chats. **The Rundown:** Stop prototyping in sandboxes and start deploying at scale. Google Cloud’s Startup School: Agent Builder is an intensive, 4-part live technical series designed for technical founders and lead engineers to master the newly consolidated Gemini Enterprise. **In this series, you will learn how to:** Learn to code a complete multi-agent "co-founder suite" Get hands-on exposure to Google Antigravity 2.0, Agent Development Kit (ADK), and the agy CLI Implement long-term state management and multimodal RAG Code custom agent state transitions programmatically in Python Image source: Anthropic **The Rundown:** Anthropic reportedly [set up](https://www.reuters.com/world/anthropic-quietly-sets-up-biology-lab-it-ramps-ai-drug-program-2026-09-18/?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) a new Bay Area lab for physical biology experiments with Claude, with the news coming a day after it [published](https://www.anthropic.com/research/claude-uplifts-biomolecular-modeling?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) research showing open-source biology AI tools running about 4x faster with its AI tuning. A Reuters source said Anthropic wants Claude steering lab robots in experiments with little human help, though the company calls human oversight essential. Anthropic says drug discovery isn't the lab's specific purpose, and it is holding off on human trials partly so it doesn't compete with pharma clients. Anthropic open-sourced code generated by Claude that sped up 30+ biomolecular models in a month, a task it says takes engineers weeks for one model. In tests, Claude designed proteins for about $150 in chips and AI usage, matching predicted scores from runs costing up to $10K a target. **Why it matters:** Claude got a way to run microscopes and robotic arms with the [recent](https://www.therundown.ai/articles/every-machine-is-about-to-speak-claude?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) Model Hardware Standard, and now it has its own physical lab to point it at. Dario Amodei promised "early glimmers" in biology within months, and frontier models, machine control, and a real-world workspace sure seem like the key ingredients for it. **QUICK HITS** ▸ **A reader built a free AI-assisted labor positioning course during pregnancy** Today’s workflow comes from an **anonymous Rundown reader**: “I’m pregnant with my second child. For my first, we had a doula, so my husband and I didn’t spend much time learning about labor positions or what can help during labor because we knew she would guide us. This time, we don’t have a doula, and we didn’t want to spend a lot of money on an online course or take the time to attend an in-person one. I asked ChatGPT to scour free resources from leading experts and create a mini-course we could work through, along with a cheat sheet for my husband to use during labor. It saved me hours of research and gave us an incredibly useful resource.” *See the full workflow here. How do you use AI? Tell us for a chance to be featured.* ⚖️ [Astra for Law](https://www.therundown.ai/tools/astra-for-law?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) - OpenAI's GPT-6 setup for legal research and drafting ⚡️ [Qwen3.8-Omni-Flash](https://qwen.ai/blog?id=qwen3.8-omni-flash&utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) - Alibaba's AI that watches, listens to, and edits videos 🎥 [P-Video-2-Pro](https://x.com/PrunaAI/status/2100585945988833736?s=20&utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) - Pruna's video AI that generates clips with audio in seconds 🤖 [Muse](https://www.therundown.ai/tools/muse?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) - Meta’s always-working personal AI agent, now available via Mac App **The Amazon Developer Global Hackathon**: Win up to $40k building apps across Fire TV, Alexa+, Ring, and Bee wearable AI. [**Register now**](https://amazonappdev2026.devpost.com/?utm_source=amzn-dev_pai&utm_campaign=ref&utm_medium=nl&utm_content=rai) and explore multiple categories and mini challenges for your projects.\* **Google** [confirmed](https://www.wsj.com/tech/ai/gemini-hacked-three-companies-in-first-known-breakout-by-googles-ai-5c0baba2?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) its AI hacked real companies mid-test, with Gemini breaching three firms in May via the same testing firm behind Meta, Anthropic, and OpenAI incidents. **NYT** [surfaced](https://arstechnica.com/tech-policy/2026/09/microsoft-exec-called-ai-scraping-the-largest-theft-of-labor-in-human-history/?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) internal Microsoft and OAI messages in a filing, including a Microsoft science director calling AI's news scraping the "largest theft of labor in human history.” **Geoffrey Hinton and 100+ AI experts** [signed](https://aievaluatorforum.org/initiatives/embedded-evaluation-letter?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) a public letter calling for safety testers to be placed inside AI labs, with staff-level access and protection from retaliation. **OpenAI** [launched](https://openai.com/index/astra-for-law/?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) Astra for Law, tuning GPT-6 Astra for legal work with U.S. case-law search and 26 plugins, with AI legal giants Harvey and Legora planning to build on it. *\*Sponsored Listing* Read our last AI newsletter: [Inside OpenAI’s log of misbehaving models](https://www.therundown.ai/articles/inside-openai-log-of-misbehaving-models?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) Read our last Tech newsletter: [Meta’s less-creepy smart glasses](https://tech.therundown.ai/p/meta-less-creepy-smart-glasses?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) Read our last Robotics newsletter: [Agility’s new ‘safer’ humanoid](https://robotnews.therundown.ai/p/agility-new-safer-humanoid?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) Today’s AI tool guide: [Build and test your own AI image skill pack](https://app.therundown.ai/guides/openrouter-101-part-2-build-an-image-skill-with-chatgpt-images-2-5?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) RSVP to next workshop on Sept. 30: [Turn Cowork into your chief of staff](https://app.therundown.ai/live/claude-cowork-201-turn-your-chat-into-a-chief-of-staff?utm_source=therundownai.beehiiv.com&utm_medium=newsletter&utm_campaign=rundown-1016) See you soon, *Rowan, Zach, Shubham, Jennifer, and Nate — the humans behind The Rundown*