Home · Technology · Nov 5 archive

OpenAI released a new cybersecurity model. Is that enough?

Confirmed

Technology Desk

In Short: OpenAI has launched GPT-6 Cyber, a new cybersecurity-focused AI model designed to identify and patch vulnerabilities in software.

OpenAI logo
Photo: OpenAI / Wikimedia Commons (Public domain)

OpenAI has unveiled GPT-6 Cyber, a new cybersecurity-focused AI model aimed at identifying and patching vulnerabilities in software. The model was used to find nearly 1,000 security flaws in the Linux operating system, a widely used and extensively vetted platform that underpins much of the world's digital infrastructure, according to Axios and TechCrunch.

Max Justicz, the chief technology officer and co-founder of Charge Robotics, discovered a severe vulnerability in Ubuntu, a widely used open-source Linux-based operating system, using GPT 5.6 Sol, a model released in July through OpenAI’s Daybreak Blue program. Justicz spent approximately $5,000 on subscriptions and tokens to find several exploits, highlighting the potential cost and effort required to uncover such vulnerabilities.

YouTube — nkuAI YouTube

OpenAI’s latest model, GPT-6 Cyber, will be available to the highest tier of users in the Daybreak Red program, which provides offensive cybersecurity researchers with tools for vulnerability hunting and development. The company has also announced a $1 billion initiative to support cybersecurity professionals working on critical infrastructure such as the electrical grid and water systems.

In addition to the Linux kernel, GPT-6 Cyber has identified 81 novel vulnerabilities in Firefox, the popular web browser. OpenAI’s researchers used the model to scan and prepare patches for vulnerabilities, finding 948 potential issues in the Linux kernel, according to TechCrunch.

Despite these advancements, OpenAI acknowledges that only thousands of cybersecurity professionals are participating in the Daybreak program, compared to a far larger number of potential hackers. The company is urging the cybersecurity community to take action before AI models become even better at hacking and easier to access.

OpenAI has also announced that it is pausing some internal activities involving its upcoming AI model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. The company is changing how it trains, monitors, and contains frontier AI models after a cybersecurity evaluation breach reached Hugging Face's production infrastructure.

OpenAI is now allocating a significant amount of its frontier compute towards discovering and patching vulnerabilities in open-source codebases, fully pro bono. The company’s goal is to dramatically expand Daybreak, bringing advanced security research to organizations of every size, independent researchers, and open-source maintainers.

What this adds

It remains unclear if frontier labs are devoting enough resources to address the growing cybersecurity challenges posed by increasingly capable AI models.

What's confirmed

What's still developing

Sources