Claude Broke Into OpenAI. That's the Least Alarming Story Today -- AI Brief September 18

Good day %%first_name%%. Security researchers just used Claude to break into OpenAI's own systems, Meta and a scrappy startup taught their AI agents to pick up the phone, and a Microsoft exec's own words are about to make a very expensive copyright case a lot more expensive. Let's get into it.

Claude Just Broke Into OpenAI's Own Codebase

VentureBeat

What happened: Three security researchers at Hacktron AI used Anthropic's Claude Opus 5 to chain a forum software bug with a separate login weakness, breaking into an OpenAI employee's ChatGPT account and reading into OpenAI's internal code repository. They reported it privately in July, OpenAI patched it, and paid a bug bounty.

Why it matters: The same reasoning that makes Claude good at debugging your code makes it good at breaking someone else's — it took three people and a chatbot, not a nation-state hacking team, to get inside one of the best-defended companies in tech.

What everyone's saying: Security circles are split between alarm and "well, obviously" — coverage is already framing this as proof AI is lowering the barrier to sophisticated hacking, and several outlets note it's the second AI-linked security incident to hit OpenAI in as many months.

My read between the lines: OpenAI got hacked with a tool built by its biggest rival, and the headline it wanted was "researchers responsibly disclosed a bug." The headline it got was "Claude broke into OpenAI." Somewhere in Anthropic's Slack there's a channel that's just emoji reactions.

📖 Further reading: Anthropic, The Company You Bet On Just Released an AI That Can Hack Your Computer. Here's the Real Story. — if Claude can break into OpenAI in the hands of researchers, it's worth understanding exactly what it can do in anyone else's.

If today's lead story has you wondering who else has a way into your systems, here's a better use of that paranoia: Viktor. It's an AI agent that lives right in Slack, plugs into 3,000+ of your tools, and actually does the work — pulls reports, builds dashboards, ships code, runs campaigns — instead of just chatting about it. Not a chatbot. A coworker. New readers get $50 off their first month. Hire Viktor →

Your AI Assistant Can Now Call Restaurants

TechCrunch

What happened: Meta's Muse and rival startup Instinct both shipped the ability for their AI agents to place real phone calls to U.S. businesses this week — booking a table, getting on a dentist's cancellation list, or fighting a cable bill, without you ever picking up the phone.

Why it matters: This is the first mainstream AI agent feature that leaves the screen entirely — the assistant isn't drafting a message for you to send, it's dialing a human and having the conversation on its own.

What everyone's saying: Early coverage is framing this as the next front in the AI-agent arms race — Goldman Sachs has reportedly flagged Muse's rollout as a stock catalyst for Meta, which tells you this is being read as "assistant wars," not a feature update.

My read between the lines: Somewhere a small-business owner is about to have a very confusing phone call with something that sounds like a slightly-too-polite robot. The real product here isn't convenience — it's a queue-jump: your AI calling ahead of every human still doing it the old-fashioned way.

📖 Further reading: I Make AI Versions of Myself for a Living. This One I Didn't Agree To. — the same agents now dialing your dentist are also modeling you — this deep-dive is about where that line actually sits.

The daily Brief is free and always will be. But if a story like today's leaves you wanting the full story, not just the headline — members get every paywalled deep-dive plus the entire archive, whenever they want it. Upgrade your membership →

Microsoft Privately Called Its Own AI Practices Theft

TechCrunch

What happened: Newly unsealed filings in the New York Times' copyright suit against OpenAI and Microsoft show a Microsoft applied-science lead calling the companies' AI training practices "the largest theft of labor in human history" in a January 2023 internal memo — while the companies allegedly scraped paywalled Times content and stripped its copyright notices.

Why it matters: This isn't an outside critic's opinion — it's the companies' own people, in writing, acknowledging what their models were built on and admitting the harm, which undercuts the "fair use" defense both have leaned on for years.

What everyone's saying: Legal and media commentary is treating the unsealed language as a gift to plaintiffs — "even they called it theft" is already the dominant takeaway, since an internal memo does more to prove intent than any outside expert testimony could.</