What happened in this Tech story?

Independent security researchers participating in OpenAI's own bug bounty program breached the company, accessing its internal code repository on GitHub using a cybersecurity-tuned version of OpenAI's Opus 4.8 and Opus 5 models.

What is a key fact in this story? (1)

**Security researchers** participating in OpenAI's bug bounty program hacked the company, gaining access to its internal code system, known as the "monorepo," on GitHub.

What is a key fact in this story? (2)

The independent bug-hunting team used a cybersecurity version of OpenAI's **Opus 4.8 and Opus 5** models to carry out the intrusion, per the Wall Street Journal.

📎 SkimNews has covered OpenAI 470+ times · see the file →

Security researchers in an OpenAI bug bounty program hacked OpenAI, accessing its "monorepo" on GitHub, using a cybersecurity version of Opus 4.8 and Opus 5 (Robert McMillan/Wall Street Journal) — SkimNews

By TechMeme · Summarized & edited by Kapil Samant · 2026-09-18

Get the Tech newsletter

Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.

Security researchers participating in OpenAI's bug bounty program hacked the company, gaining access to its internal code system, known as the "monorepo," on GitHub.
The independent bug-hunting team used a cybersecurity version of OpenAI's Opus 4.8 and Opus 5 models to carry out the intrusion, per the Wall Street Journal.

Why it matters: An AI company was breached through its own bug bounty program using a cybersecurity-tuned version of its own models — Opus 4.8 and Opus 5 — exposing internal code in the GitHub monorepo, which raises immediate questions about how OpenAI validates participants in its bounty program and safeguards core repositories.