- AI PlanetX
- Posts
- Hacktron Breached OpenAI With Claude
In partnership with
Welcome to another edition of AI PlanetX.
Hacktron used Claude to breach OpenAI accounts; Astra targets legal research; SpaceX seeks startup data to train Grok.
Inside This Edition: đź’Ž
Hottest AI News
Top AI & SaaS Tools
AI Tutorial: Turn Claude Into Inbox Assistant
Top AI & Tech News
AI Art Spotlight
Prompt of the Day: 7 Prompts for 30 Days of Content
Featured AI Video
Hottest AI News
Anthropic
Hacktron Used Claude to Breach OpenAI Accounts and Private GitHub Code
Three Hacktron AI researchers used Anthropic’s Claude to help breach OpenAI in a bug-bounty test, chaining two flaws in under 72 hours to reach employee ChatGPT/Codex accounts and internal GitHub.
Details:
A HEIF/HEIC image uploaded to OpenAI’s Discourse forum passed through ImageMagick to libheif, where a memory bug enabled remote code execution; its upstream fix had no CVE
Claude Opus 4.8 struggled to build a working exploit, but Opus 5 succeeded within hours. Hacktron found an OpenAI SSO flaw that let them take over employee ChatGPT/Codex accounts
Compromised Codex let them open a harmless PR in OpenAI’s private monorepo without reading sensitive code; Hacktron says similar HEIF research covered Slack, Meta and GitHub
Hacktron reported both flaws; OpenAI fixed SSO in 14 hours, Discourse patched the forum, and OpenAI paid $6,500. The wider research cost under $3,000.
Your agents work while you sleep
Give a Skydive agent an ongoing responsibility and they’ll handle it on schedule, every time.
Have them prep your morning report, research new leads, monitor customer feedback, or keep projects moving overnight. You wake up, the work is already done.
OpenAI
OpenAI Introduces Astra for Law for Legal Research and Workflows
OpenAI launched Astra for Law, a GPT 6 Astra based AI foundation for law firms and legal tech companies, combining legal search, legal reasoning, firm controls, and specialist integrations for professional legal work.
Details:
It searches 230M+ URLs covering U.S. case law, statutes, regulations, court rules and agency decisions, with daily updates and CourtListener data spanning 99.9% of published U.S. precedents
Across 200 Vals AI research questions it scored 54.0% versus 38.7% for GPT 6 Astra using web search, finding 24% more cases and up to 54% more relevant passages, plus legal drafting
Firms get ZDR on API and no human review by default in Enterprise; 26 partner plugins connect legal tools, 9 community plugins add 47 skills and ChatGPT for Word supports edits and proofing
U.S. firms get Trusted Entry in ChatGPT and Codex; Sullivan & Cromwell and Cooley built AI apps, while Harvey and Legora will build via the API soon.
Top AI & SaaS Tools
BizReply (Life-time Deal): AI-powered social media tool that finds relevant mentions, generates tailored replies, and creates branded reports for teams and clients
AINA: AI career coach that helps job seekers identify weaknesses, improve their profiles, and prepare for interviews through conversations with a video avatar [F-R-E-E to Try]
Exa Snapshot: Enables date-specific web searches across 400 billion historical snapshots for leak-free AI evaluations and point-in-time financial backtesting [F-R-E-E to Try]
P-Video-2-Pro: AI’s video generation model, based on MiniMax H3, that creates 5–15 second 480p or 768p videos from prompts or first/last-frame images
Canto: Wispr Flow’s latest model delivers leading real-time transcription for noisy, everyday dictation, with improved contextual recognition and speaker diarization
Blu Dot surpasses 2,000% ROAS with self-serve CTV ads
Home furniture brand Blu Dot blew up on CTV with help from Roku Ads Manager. Here’s how:
After a test campaign reached 211,000 households and achieved 1,010% ROAS, the brand went all in to promote its annual sales event. It removed age and income constraints to expand reach and shifted budget to custom audiences and retargeting, where intent was strongest.
The results speak for themselves. As Blu Dot increased their investment by 10x, ROAS jumped to 2,308% and more page-view conversions surpassed 50,000.
“For CTV campaigns, Roku has been a top performer,” said Claire Folkestad, Paid Media Strategist, Blu Dot. “Comping to our other platforms, we have seen really strong ROAS… and highly efficient CPMs, lower than any other CTV partner we've worked with.”
Using Roku Ads Manager, the campaign moved from a pilot to a permanent performance engine for the brand.
AI Tutorial
How to Make Claude Your Inbox Chief of Staff
If you spend too much time reading emails, figuring out what matters, writing replies, and scheduling meetings, Claude for Outlook can handle much of that repetitive work while keeping every final send under your control.
Install Claude for Outlook
Open Microsoft Marketplace, search for Claude for Outlook, install the add-in, and sign in with your Claude account.
Triage Inbox
Open Claude inside Outlook and have it review your unread messages. Ask it to separate emails into:
Needs attention
Important but not urgent
No action needed
This gives you a cleaner starting point instead of reading everything manually.
Find What Matters First
Have Claude identify the messages that deserve your attention first. Prioritize things like:
Deadlines
Customer or client requests
Decisions blocking other people
Understand Long Threads
Open an important email and let Claude review the conversation before you reply. Claude can use the open message, full email thread, and attachment info to understand what happened and what the sender needs.
Draft Reply
Once Claude understands the thread, ask it to prepare the response.
For example:
Draft a concise, professional reply that answers the sender's questions and clearly states the next step.Claude places the draft into Outlook’s compose window to review.
Organize Meetings
If the conversation needs a meeting, Claude can check attendee availability and help prepare the calendar invite. It can help with:
Finding a suitable time
Checking availability
Preparing the meeting details
Review and Send
Check the recipient, reply, meeting time, and any important details before sending. Claude leaves generated emails and calendar invites unsent until you approve them, so you stay in control of what goes out.
Note: Use Claude to narrow your inbox down to the messages that actually need your judgment, then focus your time there.
Top AI & Tech News
SpaceX is exploring purchases of customer and operational data from failed or struggling startups to help train Grok, xAI’s chatbot
Anthropic redesigned Claude Code Projects to coordinate parallel coding tasks across repositories, run tests, and open pull requests
Google Labs launched CC, an AI household agent that helps families manage schedules, tasks, emails and daily logistics with customizable privacy controls
OpenAI is nearing a solution to the Hodge conjecture, following its disputed and unconfirmed work on the Navier–Stokes problem
AI Art Spotlight
Create Your Own Photo Like This Using the Prompt Below:
Dynamic overhead angle photograph of muscular athletic man with cornrow braids and bright blue mirrored sport sunglasses, mouth wide open with tongue out, pouring blue Prime hydration drink bottle into his mouth with liquid stream visible, wearing black fingerless workout gloves. He's extremely sweaty with heavy sweat droplets and moisture covering his face, neck, shoulders and arms. Wearing white ribbed tank top, black shorts, white Nike Air Force 1 sneakers with white Nike socks. Shot from directly above at bird's eye view angle. Background: standing on snowy summit of Mount Titlis with dramatic Swiss Alps mountain peaks, snow-covered ridges, and blue sky visible below. The Prime bottle clearly shows the logo with icy letters. Professional sports photography, photorealistic, high detail, dramatic alpine setting, intense post-workout refreshment moment at mountain peak, 4K quality, sharp focus on subject with majestic mountain landscape surrounding.Model: ChatGPT Images 2.5 / Nano Banana 2
Prompt of the Day
7 Prompts for 30 Days of Content in Under an Hour
This set of 7 prompts helps you plan, write, repurpose, and review 30 days of social media content in under an hour. Use them to define your content pillars, generate daily post ideas, create stronger hooks, write captions, adapt posts for each platform, build a CTA bank, and catch weak spots before scheduling.