Anthropic · OpenAI · Claude · Google · GitHub · The Information · Decrypt
'Inner Thoughts' of Every Major AI Model Exposed in Large Exploit
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
★ Tier-1 Source
Security researchers have found a way to read the encrypted "inner thoughts" of every major AI reasoning model—and uncovered 62 live API keys and 33 passwords buried in session logs that developers had shared publicly online without knowing what was inside them.
Key facts
- By decoding 315,320 reasoning blocks scraped from public repositories, we recovered 367 Personally Identifiable Information (PII) artifacts and 182 credentials,” the researchers wrote
- The paper, submitted August 10 by a team from MATS Research, the ELLIS Institute Tübingen, the Max Planck Institute for Intelligent Systems, and security firm Snyk, targets a specific class of AI
- That means a block of encrypted reasoning from Claude Opus 4.8—Anthropic's flagship model—can be injected into Claude Haiku 4.5, a cheaper, less guarded sibling without breaking Anthropic’s rules
- Cross-model portability means Haiku 4.5 can read Opus 4.8's thoughts," lead researcher Alexander Panfilov wrote on X
Summary
A team or researchers found that Anthropic, OpenAI, and Google all use a single global encryption key for AI reasoning tokens. By decoding 315,320 reasoning blocks scraped from public GitHub and Hugging Face repositories, the researchers recovered 182 credentials, including 62 live API keys, 33 passwords, and 30 personal email addresses. OpenAI, Anthropic, and Google deployed server-side patches after responsible disclosure, but historical session logs already shared publicly remain decodable. “By decoding 315,320 reasoning blocks scraped from public repositories, we recovered 367 Personally Identifiable Information (PII) artifacts and 182 credentials,” the researchers wrote.