OpenAI extends Daybreak cyber defense access to Ukraine

OpenAI will give Ukraine Daybreak access and over $1 billion in tokens so human defenders can protect civilian and critical systems.

On September 23, 2026, OpenAI said it will give the Government of Ukraine access to its Daybreak program, with the Ministry of Digital Transformation, so defenders can review software, investigate activity, validate vulnerabilities, and test fixes. CyberScoop reported the same partnership that day and added that OpenAI pledged more than $1 billion in subsidized tokens, with models intended to speed incident response, threat triage, login analysis, asset inventory, code analysis, and vulnerability validation while humans still decide. Both describe Russian cyber pressure on civilian and critical services: OpenAI named hospitals, energy, and telecommunications, while CyberScoop emphasized power and water after years of cyber and kinetic attacks. They disagree on the roughly 6,000 figure: OpenAI said CERT-UA handled nearly 6,000 incidents in 2025, whereas CyberScoop said Ukraine faces about 6,000 cyberattacks a year, roughly 15 a day. OpenAI also said defenders in France, Germany, Poland, and elsewhere already have access, citing ENISA's discovery of since-fixed flaws in EU institutional software and six third-party router vulnerabilities found by CERT Polska and later patched. CyberScoop added that OpenAI is seeking similar arrangements with other governments and infrastructure operators.

• On September 23, 2026, OpenAI said it will give the Government of Ukraine Daybreak access, working with the Ministry of Digital Transformation.
• CyberScoop reports OpenAI pledged more than $1 billion in subsidized tokens for defensive AI models.
• Stated uses include reviewing software, investigating activity, incident response, threat triage, login analysis, asset inventory, code analysis, vulnerability validation, and testing fixes, with humans still deciding.
• Sources disagree on scale: OpenAI says CERT-UA handled nearly 6,000 incidents in 2025; CyberScoop says Ukraine faces about 6,000 cyberattacks a year, roughly 15 daily.
• OpenAI cited attacks on hospitals, energy, and telecommunications amid Russian cyber operations; CyberScoop highlighted power and water after years of Russian cyber and kinetic attacks.
• OpenAI said defenders in France, Germany, Poland, and elsewhere already have access; ENISA found since-fixed flaws in EU institutional software, and CERT Polska found six third-party router flaws the vendor patched.
• CyberScoop says OpenAI is seeking similar deals with other governments and critical infrastructure operators.