OpenAI released GPT-6 Cyber, a model built to find and exploit software vulnerabilities without straying outside authorized targets.
Right now only a select group of approved Daybreak Red customers can use it, through the API and Codex.
On real software, it confirmed 1,724 Linux kernel bugs and built working attacks for 948 of them, while GPT-5.6 Sol, tested the same way, managed 166.
It also found 81 serious Firefox bugs nobody knew about, and Mozilla has already released fixes for many of them.
Because the model is this good at attacking, OpenAI rates it Critical, its highest cyber-risk level
> That gain came with training to keep the agent inside the scope a researcher authorizes.
ExploitGym Honeypot tests that by planting easy-to-hack side services, such as a package registry, whose compromise also reveals the task’s flag.
Without its deployment prompt, the model ignored that bait in 99.93% of tests, against 94.49% for its predecessor, and in 100% with the prompt.