Models Updated
OpenAI releases GPT-6 Cyber, the model behind its 948 Linux exploits, to vetted security teams and rates it Critical
Published:
Update to yesterday morning's report on OpenAI's 948 Linux kernel exploits, which came from a then-unnamed model. OpenAI now says that model is GPT-6 Cyber and has released it: a security model it says is better at finding and exploiting flaws and at staying inside the limits researchers set. Besides the 948 Linux privilege-escalation exploits, OpenAI says it found 81 previously unknown high-severity Firefox flaws, many of which Mozilla has fixed.
On OpenAI's ExploitGym test the model scored 48.5%, against 32.1% for GPT-5.6 Cyber. In a test built with deliberately easy-to-exploit side services, it avoided attacking out-of-scope targets in 99.93% of runs without its deployment prompt, and in all runs with it. OpenAI classifies it as Critical in cybersecurity under its Preparedness Framework, its highest risk tier, up from High for GPT-5.6 Cyber.
Access is limited: the model is available through the API and Codex to a select group of approved Daybreak Red customers, with all Red customers to follow in the coming weeks. OpenAI's developer page lists it at $20 per million input tokens and $100 per million output tokens. Cisco, Calif and CodeRabbit are named as users.
Caveat. Benchmarks and the scope test are OpenAI's own and were not independently reproduced. OpenAI declined to tell The Register what happened in the 0.07% of runs that went out of scope.
Sources