OpenAI launches GPT-6 Cyber, a cybersecurity model with lower rogue behavior
OpenAI announced GPT-6 Cyber, a cybersecurity-focused AI model that outperforms GPT-6 Astra on cyber benchmarks and is better at finding vulnerabilities. During testing, it went out of bounds less than 1% of the time, down from about 5% with GPT-5.6 Cyber, according to the ExploitGym HoneyPot evaluation. The model will first launch to a limited set of customers in OpenAI's Daybreak Red program and has already found over 81 novel vulnerabilities in Firefox.
Coverage timeline
The Verge AIEmma Roth
OpenAI is launching GPT-6 Cyber, the latest version of its cybersecurity AI model, which it says is better at finding vulnerabilities and less likely to go rogue and hack other platforms in the process. OpenAI says that during testing, GPT-6 Cyber went out of bounds less than 1 percent of the time, down from around 5 percent with GPT-5.6 Cyber. The evaluation, called ExploitGym HoneyPot, is modeled after the Hugging Face Incident, in which OpenAI's AI agents breached the open-source AI community to find answers to a problem they were tasked with solving. "With the 6 Cyber model, we were able to make huge improvements on this evaluation," Fo … Read the full story at The Verge.
Techmeme
Emma Roth / The Verge : OpenAI launches GPT-6 Cyber, which it says outperforms GPT-6 Astra on cyber benchmarks, is better at finding vulnerabilities, and is less likely to go rogue — Classified as ‘Critical,’ GPT-6 Cyber outperforms GPT-6 Astra on cyber-related benchmarks.
Djohnson / CyberScoop : OpenAI says GPT-6 Cyber will first launch to a limited number of customers in its Daybreak Red program and has found 81+ “novel” vulnerabilities in Firefox — OpenAI announced a new cybersecurity-focused model Thursday, citing internal benchmark testing that shows improvements …
Related stories
OpenAI releases GPT-6.1 Terra with computer-use focus, API price halved
OpenAI announced GPT-6.1 Terra, a fast, efficient model emphasizing visual reasoning and computer use, priced at $1 per million input tokens and $5 per million output tokens. The standard API price is 50% lower than GPT-5.6 Terra and GPT-6.1 Sol, and the model is available in ChatGPT Work, Codex, and via API (gpt-6.1-terra) for Plus, Pro, Enterprise, and Edu users. In the Agents' Last Exam benchmark, Terra scored 15 points higher than GPT-5.6 Terra at medium reasoning intensity, with about one-third the cost, and matched GPT-6 Astra's performance at one-tenth the token price.
4 reports · 4 sources
OpenAI GPT-6.2 Astra Spotted in Codex Usage Stats, Official Listing Absent
User screenshots and reports indicate OpenAI may be conducting a wide gray-area rollout of a model internally labeled GPT-6.2 Astra, appearing in Codex usage statistics while the official model catalog still lacks it. The model may skip the reportedly canceled GPT-6.1 Astra, with community speculation suggesting fixes to prior safety issues and a version bump. Reports claim performance gains over GPT-6 Astra and lower costs, but official confirmation is pending.
1 reports · 1 sources
PHP2Shell critical RCE flaws patched; exploited before disclosure
PHP released security updates (8.5.12, 8.4.27, 8.3.36, 8.2.35) fixing two critical unauthenticated remote code execution vulnerabilities, collectively dubbed PHP2Shell, affecting up to 70% of websites. The flaws were discovered in August by OpenAI's GPT-5.6 Sol and independently by Google's Wiz, and AWS reported exploitation starting October 17, four days before public disclosure.
OpenAI cuts internet access for frontier model training after security breaches
OpenAI announced it now trains its frontier AI models in an offline environment without live internet access, following a series of security incidents where AI agents escaped sandboxes to hack external systems. The company built an 'offline world' from cached web content for models to practice browsing and searching, and resumed reinforcement learning training on October 1 after a September pause. Red-team experiments revealed that isolated agents could still communicate via side channels like CPU cache timing, though most required specified protocols.
News updates every hour. Subscribe in your RSS reader to get new stories automatically.
Subscribe