AI-assisted bug-bounty chain reached OpenAI employee accounts. The larger signal is security work at machine speed
Researchers say an AI-assisted bug-bounty chain combined a third-party flaw with an OpenAI sign-in weakness. The security lesson is not that one chatbot acted alone, but that AI can compress skilled offensive work while ordinary identity and dependency controls still determine the impact.