OpenAI rates GPT-6 Cyber Critical after major vulnerability discoveries
GPT-6 Cyber found 81 high-severity Firefox flaws and reproduced 1,724 Linux kernel vulnerabilities.
1
Stories per day · 30 days
2 RSS
Relatedopenai5gpt-62linux-kernel2agentic-security1ai-pipeline1check-point1chrome1daybreak1fairwind1gemini1google1ios1offensivecon1patch-the-planet1sandbox-escape1telegram1
19 stories, newest first · one card per story
Stories tagged #vulnerability-research
OpenAI AI pipeline finds exploits and patches Linux kernel flaws
OpenAI's pipeline identified 948 Linux local privilege-escalation vulnerabilities at $1.2 million API cost through automated discovery, exploitation and patching.
1
OpenAI pipeline validates 948 Linux privilege escalation exploits
OpenAI’s autonomous pipeline discovered and patched 948 local privilege escalation vulnerabilities in the Linux kernel at a cost of $1.2 million.
1
Google unveils Gemini 4 Carbon for finding and fixing flaws
Limited Fairwind access comes first; Google cites 88.2% on SEC-bench Pro and prices of $2 and $10 per million tokens.
OffensiveCon Japan agenda covers Chrome, Telegram and iOS research
October 27–28 session titles name Skia, Telegram stickers and Muse Spark, but list no CVEs, versions or confirmed attacks.
3
Check Point uses OpenAI Daybreak to speed vulnerability research
The company says analyst work that took hours now takes minutes and is building agentic network security that needs human approval.
Anthropic offers free AI security scans to open-source maintainers
Anthropic launched a free OSS Scanner that uses Claude to report vulnerabilities to open-source maintainers.
2
Anthropic gives more security teams access to Claude with fewer safety restrictions
Anthropic widened its Cyber Verification Program, giving vetted security teams Claude access with reduced safety filters.
3 lessons from frontier AI vulnerability research
Microsoft says its FORGE AI research helped uncover 140 Windows CVEs and 155 open-source bug reports since May.
Can an Open Model Do Security Research? Cantina’s apex-flash-1 Solves 40 of 60 Held-Out Bug Tasks
Cantina and Yeta Labs released apex-flash-1, an open model that solved 40 of 60 bug tasks.
Microsoft says threat actors are ahead in the early AI race
Microsoft says attackers are using AI faster than defenders, shrinking exploit development to under a day.
How we found 24 Android vulnerabilities using our open source AI security agent
GitHub Security Lab’s AI taskflows uncovered 24 Android bugs, including OsmAnd location tracking.
Researchers Find Security Risks in 73.6% of 61,500 Abandoned IoT Apps
A study of 61,500 abandoned Android IoT companion apps found 73.6% contain vulnerable libraries, dead domains, or insecure data flows exposing sensitive user data.
2
DeepZero: Open-source hunting for vulnerable Windows drivers
DeepZero, a new open-source engine, automates discovery of exploitable Windows kernel drivers for BYOVD attacks using Ghidra, Semgrep, and an LLM.
The gpg.fail aftermath: On responsible disclosure, GPG, and the state of security in 2026 [32:37]
A conference talk recounts GPG vulnerability disclosures, notes several GnuPG flaws remain unpatched, and demonstrates novel bugs live.
Claude Mythos only model to complete full cyber kill chain, experts say
Booz Allen's Cyber Weapon Index finds only Claude Mythos completed an autonomous full cyber kill chain; mainstream AI-driven attacks deemed imminent.
4
Wordfence Argus: Moving Beyond Human Research Capability
Wordfence showcases Argus, an AI agent for security research whose breakthrough findings required the AI itself to explain them.
'HTTP Terminator' Hunts for Novel Desync Attacks
PortSwigger's James Kettle discusses HTTP Terminator, an AI-powered open source tool that uncovered new HTTP request-smuggling (desync) techniques.
The Illusion of a Lock – How AI is changing the speed and scale of hands-on WordPress vulnerability research.
Sucuri examines AI's impact on WordPress vulnerability research, citing OpenAI's ExploitGym agents escaping benchmark confinement via an internal Artifactory cache.