tech
OpenAI released a new cybersecurity model. Is that enough?
OpenAI said its new cybersecurity model, ChatGPT Cyber, will go to top-tier users of its Daybreak Red program.
Key points
- OpenAI said its ChatGPT Cyber model will be available to the highest tier of users in the Daybreak Red program.
- OpenAI said the same model scanned Linux kernel code and found 948 potential issues, plus 81 novel Firefox vulnerabilities.
- Max Justicz said he found a severe Ubuntu server vulnerability in about two hours and spent about $5,000 on subscriptions and tokens.
Why it matters. OpenAI says defenders have a narrow window to act before AI models get better at hacking, while some cyber defenders say the new AI-found work may outstrip their resources.
OpenAI announced today that its new cybersecurity model, ChatGPT Cyber, will go to the top tier of users in its Daybreak Red program. The company said the same model had scanned Linux kernel code and found 948 potential issues, plus 81 novel vulnerabilities in Firefox. Max Justicz, co-founder and CTO of Charge Robotics, said GPT 5.6 Sol found a severe Ubuntu server vulnerability in two hours, and he spent about $5,000 on subscriptions and tokens.
Latest updates
OpenAI released a new cybersecurity model. Is that enough?
OpenAI's newest cybersecurity model comes out as AI labs face scrutiny of their work to protect digital infrastructure. Max Justicz, the chief technology officer and co-founder of the startup Charge Robotics, used an OpenAI model to find a severe vulnerability that — if exploited — could allow hackers to take control of servers running Ubuntu, a widely used open source Linux-based operating system. Justicz, who has a hobbyist’s interest in cybersecurity and previously found a vulnerability in the same codebase, told TechCrunch that he found this issue using GPT 5.6 Sol, released in July, through the AI maker’s Daybreak Blue, a program that gives cybersecurity defenders access to powerful frontier models. “I literally just aimed ChatGPT at the same body of code and said ‘I found this bug previously that was fixed several years ago, please find bugs as bad or worse,’ and it came back in two hours with this,” Justicz said. “It’s extremely convoluted and hard for a human to find, but it works!” He reported the issue to the Debian Project, which maintains the software in question and issued a patch to fix the vulnerability. There has been no known evidence of exploitation. Still, the ease with which he found it suggests that we’ve only seen the tip of the iceberg when it comes to potential exploits that even novice hackers can utilize with the help of AI models. “I can only imagine .