Cybersecurity-focused model that reproduced and successfully exploited nearly a thousand Linux kernel privilege-escalation flaws
OpenAI launched two security products under its Daybreak brand: Red Team, which uses AI agents to map attack paths from source code and app context and to verify reported flaws and patches, and Defense Factory, which scans codebases and generates deployable fix pull requests with tests. Both run on the new GPT-6 Cyber model, marking OpenAI's formal entry into offensive and defensive cybersecurity.
Researchers tasked a large model with autonomous Linux privilege escalation and it produced 400+ working local-to-root zero-day exploits at roughly 2.5 hours each, far outpacing human reverse engineers who needed weeks per case. A follow-up run with GPT-6 Cyber reproduced 1,724 kernel vulnerabilities and successfully exploited 948 at about $1.21M total cost, including at least 10 previously undisclosed techniques. AI now delivers end-to-end vulnerability discovery and weaponization, fundamentally shifting attacker-defender economics.