Loading story…
OpenAI has announced the release of Codex Max, a new version of its programming-focused AI model, designed to handle larger workloads and deliver faster performance. The Codex Max model features improved context handling, allowing it to process more information in a single session, and offers faster execution with fewer tokens, resulting in greater efficiency for real-world coding tasks. This update is available to users of ChatGPT Plus, Pro, Business, Edu, and Enterprise, with API access planned for the near future. Notably, Codex Max is the first Windows-trained Codex model, enhancing its utility for cross-platform development and agentic coding tasks.
The new model replaces GPT-5.1-Codex as the recommended solution for complex coding environments, supporting larger project assignments without being overwhelmed by context limitations. OpenAI's move follows a series of major AI programming announcements from other industry leaders, positioning Codex Max as a significant advancement for developers seeking improved productivity and scalability in AI-assisted coding. The release is expected to streamline development workflows and support more sophisticated automation in software engineering environments.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
ZDNET published reports describing OpenAI's Codex Max as addressing a major AI coding annoyance and delivering significantly faster performance. The two references appear to cover the same product update rather than separate events.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OpenAI announced *Codex Security* (formerly **Aardvark**), an application security agent designed to autonomously **discover, validate, and remediate** vulnerabilities in enterprise and open-source codebases. The product builds a project-specific threat model (mapping trust boundaries and exposure points), then prioritizes issues by likely real-world impact and attempts to **confirm findings by running proof-of-concept exploits in sandboxed environments** before generating contextual patches intended to minimize regressions. OpenAI reported beta metrics including an **84% reduction in alert noise**, a **90% decrease in over-reported severity**, and a **>50% drop in false positives**, and said the system scanned **1.2 million commits** from external repositories over a 30-day period; the tool is rolling out as a research preview via the Codex web interface to ChatGPT Pro, Enterprise, Business, and Edu customers. Separately, OpenAI released the **GPT-5.4** model across ChatGPT, Codex, and the API (`gpt-5.4` and `gpt-5.4-pro`), positioning it as a flagship model with improved reasoning, coding, and agent workflows, plus native computer-use capabilities. OpenAI stated it reduced hallucinations and errors (claiming user-flagged factual errors were **33% less likely** than GPT-5.2 on a de-identified prompt set) and said it **upgraded safety protections** while keeping the same high cyber-risk classification used for GPT-5.3-Codex, indicating continued emphasis on security controls as model capabilities expand.
Jun 29, 2026
OpenAI has released GPT-5.2-Codex, a new AI model designed to enhance agentic coding and cybersecurity tasks, with notable improvements in vulnerability detection and software engineering workflows. The model demonstrates superior performance on benchmarks such as SWE-Bench Pro and Terminal-Bench 2.0, and excels in professional Capture-the-Flag challenges, supporting advanced tasks like fuzzing, attack surface analysis, and test environment setup. OpenAI has implemented stronger safeguards to mitigate dual-use risks and is offering the model to paid ChatGPT Codex users, with an invite-only pilot for vetted cybersecurity professionals focused on defensive applications. The model's capabilities have already contributed to the discovery of several critical vulnerabilities in React Server Components, including CVE-2025-55182 (RCE), CVE-2025-55183 (source code exposure), and CVE-2025-67779 (DoS), prompting urgent patching recommendations. Industry research highlights both the promise and risks of AI-generated code, with studies showing that machine-written pull requests contain significantly more bugs and security vulnerabilities than those authored solely by humans. Issues such as improper password handling, insecure object references, and cross-site scripting are notably more prevalent in AI-generated code, raising concerns about the security implications of rapid AI-driven development. These findings underscore the importance of robust review processes and the need for continued vigilance as AI tools become more deeply integrated into software engineering and cybersecurity operations.
Jun 29, 2026
OpenAI announced **GPT-5.3-Codex**, positioning it as more than a code-generation model and expanding its availability across a new macOS desktop app plus CLI, IDE extension, and web interface, with API access described as forthcoming. OpenAI and third-party coverage said the model is intended to support broader software-lifecycle work (e.g., debugging, deployments, monitoring, tests, and documentation) and highlighted benchmark gains over prior Codex versions; reporting also pushed back on claims that “Codex built itself,” characterizing OpenAI’s statement as the model being *instrumental* in its own development rather than fully autonomous. In parallel, OpenAI unveiled **Frontier**, an enterprise framework aimed at building, deploying, and managing AI agents, including promised agent security features and an approach modeled on Palantir-style **forward-deployed engineers** working alongside customer teams. Separately, *MintMCP* launched an enterprise governance platform focused on deploying, monitoring, and securing AI agents and MCP servers, emphasizing audit trails, policy enforcement, observability/guardrails, and centralized access controls to reduce risks from privileged agents (e.g., credential exposure and data exfiltration). Other items in the set were not tied to these launches, including a general CIO column on SMB IT “quick fixes” creating long-term risk and a corporate internal AI learning program announcement from Hancom.
Jun 29, 2026