#sso
2 cases
Hacktron used Claude to hack OpenAI's forum, take over an employee's Codex, and open a PR in OpenAI's own repoAI & Machine LearningData Breach
An unpatched, un-CVE'd image decoder bug plus an OpenAI SSO flaw let three researchers turn a forum account into internal GitHub access in under 72 hours — with Claude Opus 4.8 failing where Opus 5 succeeded within hours.
AI & Machine LearningData Breach
Dropbox via Lenovo ID: How a Third Party's Email Check Became a Password Bypass for 5,000 AccountsData BreachIdentity Theft
For 17 days in August 2026 an attacker registered Lenovo IDs on other people's email addresses and signed straight into their Dropbox accounts. Lenovo's verification was the flaw; Dropbox's willingness to trust it without a password was the breach.
Data BreachIdentity Theft