Read Online | Sign Up | Advertise |
|
|
|
Good morning, AI enthusiasts, and welcome to our 8,268 new readers. The same week in July that OpenAI admitted its models had hacked Hugging Face, someone else was also letting themselves into OpenAI, ironically with Claude’s help. |
Security startup Hacktron says its three-person team reached the AI giant's private code in less than three days, then reported the hole and collected $6,500 for it. The next group might not be as kind. |
|
|
In today’s AI rundown: |
OpenAI hacked by ‘three guys with Claude’ The Rundown Roundtable: Our AI use cases Build and test your own AI image skill pack Anthropic moves its biology push into a real lab
|
|
|
|
|
|
|
OPENAI |
|
 |
Image source: Hacktron AI |
|
The Rundown: Security startup Hacktron AI just revealed that its three researchers got inside OpenAI's private codebase in under 72 hours this July, taking over employee accounts in an attack that Anthropic's Claude helped write. |
The details: |
Hacktron used an image-upload bug to get into OAI's community forum, where a second flaw let staff sign-in tokens also unlock their ChatGPT accounts. Claude Opus 5 finished the attack within a day of its release, picking up from code that an Opus 4.8 version, only available for cyber pros, couldn't complete. As proof, they left a suggested edit on an internal OAI documentation file signed “Hacktron AI Team PoC” and then reported it, earning a $6,500 bounty. Hacktron said flaws in the same image software also let it breach Slack, Meta, and GitHub Enterprise, with only one target catching it mid-attempt.
|
Why it matters: While “just three guys with Claude and Codex subscriptions,” as one of the researchers said, might be underselling their capabilities. But if a small trio can get inside one of the world's top AI labs in under three days, it's hard not to wonder what large, well-funded black-hat groups are suddenly becoming capable of. |
|
|
|
TOGETHER WITH PAVE |
|
|
|
The Rundown: Pave builds real, working apps from plain language — and now those apps connect to the CRM, the inbox, and the finance tools you already run on. Describe the process once, and Pave runs it between your systems automatically. |
Now you can: |
Connect Pave to the systems you already run on Turn a manual handoff into an automatic one Build the process once — it runs itself from there
|
Try Pave free. |
|
|
|
THE RUNDOWN ROUNDTABLE |
|
 |
Image source: Nick @ The Rundown |
|
The Rundown: The Rundown Roundtable is a weekly feature where we poll members of The Rundown staff about how we use AI in our work and daily lives. |
Nick, Video Editor: I built a workflow that converts landscape (16:9) footage into vertical (9:16) video without heavily cropping the original footage. Using AI tools and a simple node tree in Magnific, I generated the missing visual data outside the original frame so the final video looks as if it was captured vertically. |
Previously, this felt like too much trouble and too many steps to be worthwhile. Using Magnific Spaces, I extended the first frame of the video to fit a 9:16 frame with one prompt. Then I used a second prompt with the new frame and the original video as references in a video-generation node. |
I used Seedance 2.0 to save credits because I had low expectations that the workflow would work. To my surprise, the output was great immediately. It was not perfect, but the generated footage matched the original clip very well. |
Tiffany, Creative Strategist: My mom and I love trying new recipes together, but our best dishes rarely turn out exactly like the original recipe. She adds a little more garlic, I suggest a different spice, and by the time we sit down to eat, neither of us remembers what we changed. |
I started using ChatGPT as our cooking journal. After we make something, I send it a photo of the dish and a quick voice note about what we used, what we changed, and what we’d do differently next time. ChatGPT turns those notes into a recipe we can make again while preserving our comments and the story behind the meal. |
Now, when we’re deciding what to cook, I can ask for a favorite we haven’t made in a while, a recipe that uses what’s in the fridge, or a shopping list for our next cooking day. It’s becoming a collection of our recipes and the time we’ve spent making them together. |
|
|
|
AI TRAINING |
|
|
|
The Rundown: In this guide, you will learn how to turn your OpenRouter connection into a reusable image skill pack. We'll build skills for the images you make most often, then test their prompts and model choices against the results. |
Step-by-step: |
Open the agent where you connected OpenRouter in Part 1. We used GrokBot. Ask it to confirm the connection before building anything Build a skill bundle for your common image jobs. We chose newsletter ads and studio product photos. Label each variation with its model Use test prompt: “Write and run real evals for the newsletter ad skill. Test its prompts, model choices, and number of variations. Improve SKILL.md from the results, then send me images and scores.” It can rerun after changing the skill Compare the scores with actual images. Our agent handed out 10s, but we gave one result a 5.5. Tell what's wrong and rerun the test before accepting changes
|
Pro tip: Save the skills and tests together as a bundle, so useful work doesn't disappear into old chats. |
|
|
|
PRESENTED BY GOOGLE FOR STARTUPS |
|
|
|
The Rundown: Stop prototyping in sandboxes and start deploying at scale. Google Cloud’s Startup School: Agent Builder is an intensive, 4-part live technical series designed for technical founders and lead engineers to master the newly consolidated Gemini Enterprise. |
In this series, you will learn how to: |
Learn to code a complete multi-agent "co-founder suite" Get hands-on exposure to Google Antigravity 2.0, Agent Development Kit (ADK), and the agy CLI Implement long-term state management and multimodal RAG Code custom agent state transitions programmatically in Python
|
Build your multi-agent suite today. |
|
|
|
ANTHROPIC |
|
 |
Image source: Anthropic |
|
The Rundown: Anthropic reportedly set up a new Bay Area lab for physical biology experiments with Claude, with the news coming a day after it published research showing open-source biology AI tools running about 4x faster with its AI tuning. |
The details: |
A Reuters source said Anthropic wants Claude steering lab robots in experiments with little human help, though the company calls human oversight essential. Anthropic says drug discovery isn't the lab's specific purpose, and it is holding off on human trials partly so it doesn't compete with pharma clients. Anthropic open-sourced code generated by Claude that sped up 30+ biomolecular models in a month, a task it says takes engineers weeks for one model. In tests, Claude designed proteins for about $150 in chips and AI usage, matching predicted scores from runs costing up to $10K a target.
|
Why it matters: Claude got a way to run microscopes and robotic arms with the recent Model Hardware Standard, and now it has its own physical lab to point it at. Dario Amodei promised "early glimmers" in biology within months, and frontier models, machine control, and a real-world workspace sure seem like the key ingredients for it. |
|
|
|
|
|
|
COMMUNITY AI WORKFLOW OF THE DAY |
▸ A reader built a free AI-assisted labor positioning course during pregnancy |
Today’s workflow comes from an anonymous Rundown reader: |
“I’m pregnant with my second child. For my first, we had a doula, so my husband and I didn’t spend much time learning about labor positions or what can help during labor because we knew she would guide us. |
This time, we don’t have a doula, and we didn’t want to spend a lot of money on an online course or take the time to attend an in-person one. I asked ChatGPT to scour free resources from leading experts and create a mini-course we could work through, along with a cheat sheet for my husband to use during labor. |
It saved me hours of research and gave us an incredibly useful resource.” |
See the full workflow here. How do you use AI? Tell us for a chance to be featured. |
|
|
|
|
⚖️ Astra for Law - OpenAI's GPT-6 setup for legal research and drafting ⚡️ Qwen3.8-Omni-Flash - Alibaba's AI that watches, listens to, and edits videos 🎥 P-Video-2-Pro - Pruna's video AI that generates clips with audio in seconds 🤖 Muse - Meta’s always-working personal AI agent, now available via Mac App
|
|
|
|
|
The Amazon Developer Global Hackathon: Win up to $40k building apps across Fire TV, Alexa+, Ring, and Bee wearable AI. Register now and explore multiple categories and mini challenges for your projects.* |
Google confirmed its AI hacked real companies mid-test, with Gemini breaching three firms in May via the same testing firm behind Meta, Anthropic, and OpenAI incidents. |
NYT surfaced internal Microsoft and OAI messages in a filing, including a Microsoft science director calling AI's news scraping the "largest theft of labor in human history.” |
Geoffrey Hinton and 100+ AI experts signed a public letter calling for safety testers to be placed inside AI labs, with staff-level access and protection from retaliation. |
OpenAI launched Astra for Law, tuning GPT-6 Astra for legal work with U.S. case-law search and 26 plugins, with AI legal giants Harvey and Legora planning to build on it. |
*Sponsored Listing |
|
|
|
|
|
|
That's it for today!Before you go we’d love to know what you thought of today's newsletter to help us improve The Rundown experience for you. |
|
|
See you soon, |
Rowan, Zach, Shubham, Jennifer, and Nate — the humans behind The Rundown |
|
|
|
|
|
|
