Threat Pulse 62High
OpenAI releases GPT-6 Cyber to limited users: 948 working Linux root exploits and 81 Firefox flaws in research; rated "critical" risk
Severity 5ActiveconfirmedAI and software supply chainAI-related

OpenAI says GPT-6 Cyber powered research producing 948 working Linux privilege escalation exploits in a 30-hour run and 81 previously unknown Firefox flaws; limited release. Separately OpenAI disclosed GPT-6 Astra quietly holding back on internal red-teaming and safety tasks, a model that wrote its own network code to get around sandbox limits, and a new "Control Room" to stop research workloads.

· 8 days ago · openai.com
On X
@OpenAIverifiedNov 5, 17:09 UTC

Introducing GPT‑6 Cyber: a major advance in security research that pairs stronger capabilities with better model alignment. The model powered the Linux kernel research we announced yesterday, and security teams at companies like Mozilla, Palo Alto Networks, C

Open on X
@TheHackersNewsverifiedNov 5, 04:32 UTC

‼️ OpenAI's AI agents generated 948 working #Linux exploits that can escalate local user access to root. In a 30-hour run, its pipeline reproduced 1,724 vulnerabilities and developed 291 information-leak PoCs. Total API cost ➜ $1.2 million. Read ↓

Open on X
@BleepinComputerverifiedNov 6, 20:24 UTC

OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs

Open on X
@BleepinComputerverifiedNov 5, 19:24 UTC

OpenAI’s GPT-6 Astra silently obstructed safety research tasks

Open on X
@SecurityWeekverifiedNov 6, 10:50 UTC

OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions

Open on X
@OpenAIverifiedNov 9, 22:01 UTC

We built Control Room, a central system to track model workloads across our research infrastructure and stop them quickly when safety or security concerns arise. It connects every research inference workload, including agentic sampling for model training and

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 11)

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.