The Information Machine
FollowingDay 2in the edition since 9 Nov 20262 sourcesupdated 9 Nov 2026

OpenAI's GPT-6 Cyber offensive security model

The gist

Latest: OpenAI Releases GPT-6 Cyber for Restricted Offensive Security Research

A model restricted to authorized testers is finding hundreds of real, previously unknown software vulnerabilities and building working exploits at a scale its predecessor could not reach. Altman's Bloomberg remarks indicate at least one additional OpenAI model reached a cyber-critical threshold and a separate future model was paused over similar concerns.

When stories like this move, I write about them in an email each morning.

One free email each morning, around 8 AM US Eastern.

The full picture

OpenAI released GPT-6 Cyber, a model built for offensive security research that is restricted to approved Daybreak Red customers via API and Codex. On Linux kernel testing, it confirmed 1,724 bugs and built working exploits for 948 of them, compared to 166 for its predecessor GPT-5.6 Sol on the same test. The model also found 81 serious Firefox vulnerabilities that were previously unknown, and Mozilla has released fixes for many of them. OpenAI classifies GPT-6 Cyber at its highest internal cyber-risk level, 'Critical'. To address scope discipline, the model was trained to ignore out-of-bounds honeypot targets 99.93% of the time without a deployment prompt and 100% of the time with one. Broader access is planned over time. Separately, Sam Altman said on Bloomberg Television that GPT-6 Astra, a model that has already finished training, is distinct from a future model that OpenAI paused over cybersecurity concerns, and that Astra itself reached a 'cyber-critical' threshold during development.

How it developed
First in the edition · 9 November 2026
8 November 2026in the 9 Nov edition

OpenAI released GPT-6 Cyber, a model built for offensive security research, restricting access to approved Daybreak Red customers via API and Codex with broader access planned over time.

On Linux kernel testing, the model confirmed 1,724 bugs and built working exploits for 948 of them, compared to 166 for its predecessor GPT-5.6 Sol on the same test. It also found 81 previously unknown Firefox vulnerabilities, Mozilla has released fixes for many of them, and OpenAI classifies the model at its highest internal cyber-risk level, "Critical".

4 September 2026

Sam Altman said on Bloomberg Television that GPT-6 Astra has finished training, hit a 'cyber-critical' threshold, and is distinct from a future model paused over cybersecurity concerns.

Sources

Get the daily email

When stories like this move, I write about them in an email each morning.

One free email each morning, around 8 AM US Eastern.

See the latest edition · Privacy