Loading story…
OpenAI announced an expansion of Daybreak, describing it as a response to a narrowing cyber defense window as defenders face faster-moving threats. The company said the program is intended to strengthen cyber defense capabilities and improve how security teams research, understand, and respond to offensive techniques.
Separate reporting said OpenAI also launched GPT-5.6-Cyber, a model tuned for cybersecurity work with fewer refusals in controlled exploit-research contexts. The release indicates a push toward giving vetted defenders and researchers more capable tooling for vulnerability analysis and red-team style investigation while framing the effort around defensive use cases.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
OpenAI said GPT-5.6 Cyber identified two previously undisclosed vulnerabilities in Google’s V8 JavaScript engine that could be chained to corrupt memory and escape the V8 heap sandbox. The company said Google fixed the chained issues under CVE-2026-15903, while other discovered flaws in unnamed software remained under coordinated disclosure.
OpenAI announced a partnership program with 16 major cybersecurity providers, including IBM, CrowdStrike, Palo Alto Networks, Cisco, Cloudflare, and Sophos. The company said organizations will be able to access its frontier cyber models through existing security services offered by those partners.
OpenAI announced a new cybersecurity-focused model family, GPT-5.6 Cyber, and made it available through Daybreak Access in two tiers: Daybreak Blue for broader defensive workloads and Daybreak Red for more specialized, tightly governed engagements. The company said access is restricted to approved partners and supported security vendors rather than regular users, with safeguards such as identity verification, scoped testing, logging, monitoring, and human oversight.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
12 references tracked. Mallory keeps watching after this page renders.
helpnetsecurity.com
Open sourceventurebeat.com
Open sourcehelpnetsecurity.com
Open sourceopenai.com
Open sourceruntimewire.com
Open sourceopenai.com
Open sourceopenai.com
Open sourceopenai.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OpenAI launched **Daybreak**, a cybersecurity initiative built around `GPT-5.5`, a tiered **Trusted Access for Cyber** framework, and **Codex Security** as its agent harness, positioning it alongside Anthropic’s earlier **Project Glasswing**. Both programs advertise similar defender-focused uses, including vulnerability discovery, exploit validation in authorized environments, patch validation, and detection engineering, while differing mainly in governance and access controls. Major security vendors including **Cisco**, **CrowdStrike**, and **Palo Alto Networks** joined both efforts, signaling that large defenders are pursuing model-agnostic strategies rather than committing to a single AI provider. The launches come as the UK AI Security Institute reported that autonomous AI cyber capability is advancing quickly, with the 80%-reliability cyber task time horizon previously doubling every **4.7 months** and new results from **Claude Mythos Preview** and `GPT-5.5` exceeding that trend. A newer Claude Mythos Preview checkpoint became the first model to complete both AISI cyber ranges, including the previously unsolved **Cooling Tower**, while `GPT-5.5` also posted strong results on **The Last Ones**; AISI said benchmark differences between the leading models are now narrow enough that practical differentiation is shifting toward agent harnesses, access restrictions, auditability, and partner ecosystems. The institute warned that current tests likely understate real-world capability and urged organizations to strengthen security baselines as both the defensive value and the cyber risk of frontier models increase.
Jun 29, 2026
The UK’s AI Security Institute found that OpenAI’s **GPT-5.5** performed at or above the level of Anthropic’s **Mythos Preview** in offensive cybersecurity evaluations, underscoring a sharp rise in frontier-model cyber capability. In an AISI benchmark built around **95 Capture The Flag challenges**, GPT-5.5 reportedly led overall on advanced tasks with a **71.4%** score, ahead of Mythos Preview at **68.6%** and GPT-5.4 at **52.4%**. The tested scenarios included realistic security work such as firmware analysis without source code, exploitation of memory-corruption bugs including `use-after-free`, cryptographic bypass, attacks on weak random-number generators, and analysis of obfuscated malware. The results also showed limits: Mythos Preview reportedly remained stronger in longer, multi-step intrusion simulations, including a **32-step** exercise known as **“The Last Ones,”** and neither model completed a simulated industrial-system attack. Researchers and commentators said the findings point to rapid gains driven by greater autonomy, stronger reasoning, and improved coding ability, increasing concern over near-term misuse. Reports differed on deployment details, with some noting restrictions on GPT-5.5’s full public availability while others described the model as generally available, but the evaluations broadly agreed that leading AI systems are now highly capable at vulnerability discovery and offensive security tasks.
Jun 29, 2026
OpenAI announced *Codex Security* (formerly **Aardvark**), an application security agent designed to autonomously **discover, validate, and remediate** vulnerabilities in enterprise and open-source codebases. The product builds a project-specific threat model (mapping trust boundaries and exposure points), then prioritizes issues by likely real-world impact and attempts to **confirm findings by running proof-of-concept exploits in sandboxed environments** before generating contextual patches intended to minimize regressions. OpenAI reported beta metrics including an **84% reduction in alert noise**, a **90% decrease in over-reported severity**, and a **>50% drop in false positives**, and said the system scanned **1.2 million commits** from external repositories over a 30-day period; the tool is rolling out as a research preview via the Codex web interface to ChatGPT Pro, Enterprise, Business, and Edu customers. Separately, OpenAI released the **GPT-5.4** model across ChatGPT, Codex, and the API (`gpt-5.4` and `gpt-5.4-pro`), positioning it as a flagship model with improved reasoning, coding, and agent workflows, plus native computer-use capabilities. OpenAI stated it reduced hallucinations and errors (claiming user-flagged factual errors were **33% less likely** than GPT-5.2 on a de-identified prompt set) and said it **upgraded safety protections** while keeping the same high cyber-risk classification used for GPT-5.3-Codex, indicating continued emphasis on security controls as model capabilities expand.
Jun 29, 2026