tech
OpenAI released a new cybersecurity model. Is that enough?
OpenAI announces ChatGPT Cyber, a new cybersecurity model for top-tier users of its Daybreak Red program.
Key points
- OpenAI said ChatGPT Cyber will be made available to the highest tier of users in its Daybreak Red program.
- OpenAI said its model found 948 potential issues in the Linux kernel and 81 novel vulnerabilities in Firefox.
- Max Justicz used an OpenAI model to find a severe Ubuntu-related vulnerability, and the Debian Project issued a patch.
Why it matters. The ease of Justicz's find suggests AI models could help even novice hackers uncover serious flaws, which cyber defenders may struggle to keep pace with.
Today, OpenAI said its new cybersecurity model, ChatGPT Cyber, will be offered to the top tier of users in its Daybreak Red program. Earlier, the company said the model had identified 948 potential Linux kernel issues and 81 "novel" vulnerabilities in Firefox. Max Justicz, chief technology officer of Charge Robotics, used an OpenAI model to find a severe Ubuntu flaw in two hours and reported it to the Debian Project, which issued a patch.
Latest updates
OpenAI released a new cybersecurity model. Is that enough?
OpenAI's newest cybersecurity model comes out as AI labs face scrutiny of their work to protect digital infrastructure. Max Justicz, the chief technology officer and co-founder of the startup Charge Robotics, used an OpenAI model to find a severe vulnerability that — if exploited — could allow hackers to take control of servers running Ubuntu, a widely used open source Linux-based operating system. Justicz, who has a hobbyist’s interest in cybersecurity and previously found a vulnerability in the same codebase, told TechCrunch that he found this issue using GPT 5.6 Sol, released in July, through the AI maker’s Daybreak Blue, a program that gives cybersecurity defenders access to powerful frontier models. “I literally just aimed ChatGPT at the same body of code and said ‘I found this bug previously that was fixed several years ago, please find bugs as bad or worse,’ and it came back in two hours with this,” Justicz said. “It’s extremely convoluted and hard for a human to find, but it works!” He reported the issue to the Debian Project, which maintains the software in question and issued a patch to fix the vulnerability. There has been no known evidence of exploitation. Still, the ease with which he found it suggests that we’ve only seen the tip of the iceberg when it comes to potential exploits that even novice hackers can utilize with the help of AI models. “I can only imagine .