Researchers chained a forum bug into OpenAI account takeover - and it's already fixed
Security firm Hacktron says it hijacked ChatGPT and Codex accounts via OpenAI's own help forum, but the hole was patched months ago and OpenAI paid up for the tip-off.