… OpenAI’s blog post has a chart showing how GPT-5.6 Sol is getting better at sustaining multistep cyber operations and also encourages enterprise customers to sign up to access its “Cyber” security model. …
… Like Glasswing, Daybreak isn’t built on just one AI model — OpenAI says “Daybreak brings together the most capable OpenAI models, Codex, and our security partners.” Daybreak also involves specialized cyber models, including GPT-5.5 with Trusted Access for Cyber and GPT-5.5-Cyber, which began rollin… …
… This follows weeks of hand-wringing over the capabilities of cybersecurity-focused AI models like Anthropic’s Mythos and a recently disclosed Linux vulnerability that was discovered with AI assistance. …
… Joshua Saxe, CTO and cofounder of Security Superintelligence Labs, wrote in a blog post that exploits themselves don’t cause cyberattacks, and that adoption of AI vulnerability research tools has been incremental. “There seems to be an implicit mental model where some new adversarial tool becomes a… …
… It appeared to reference the recent jailbreaking travails of its rival Anthropic, writing that “GPT‐5.6 is trained to refuse prohibited cyber assistance, including when users attempt to disguise their intent or jailbreak the model.” It also said that flagship model Sol “is better at helping people … …
… Richard Lawler May 13 AI cybersecurity updates for MDASH, Mythos, and GPT-5.5. On Wednesday, the AISI, which evaluates AI models for the British government, said both Anthropic’s Claude Mythos Preview and OpenAI’s GPT-5.5 showed progress well above previous trends on cybersecurity testing. …
… AISI said the incident should be “interpreted with caution and nuance” but warned the agent’s actions “show signs of novel, potentially deceptive behaviours” that “were to an extent and severity we did not anticipate.” In a blog post, OpenAI acknowledged the breach that happened during AISI’s testi… …
… In this case, reports suggest OpenAI was unaware its own agent was behind the dayslong cyber campaign at Hugging Face and did not notice until well after the threat had been contained and the FBI contacted. There are still many details about the hack that are unknown or have not been made public. …
… The company has framed Mythos as a “watershed moment for security,” claiming it found vulnerabilities in “every major operating system and web browser,” and said its release must be coordinated to allow time to “reinforce the world’s cyber defenses.” Anthropic has a habit of using dramatic, alarm… …
… I wrote about the cybersecurity time bomb of AI browsers for The Verge last year. Many of the issues experts raised regarding the difficulty of securing them apply to other AI systems too.