OpenAI’s GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed - Help Net Security
By Google News AI ·
OpenAI has introduced GPT-6 Cyber, a version of GPT-6 Astra trained to find software vulnerabilities, test how attackers could exploit them, and help develop fixes. The model is designed for authorized security testing of websites and applications.
OpenAI used GPT-6 Cyber to help secure its systems, including the infrastructure used to train its AI models. In controlled security tests, agents using GPT-6 Cyber and other OpenAI models combined vulnerabilities to escape isolated virtual environments and run code on the host computers. The company said it used the findings to patch software, tighten network restrictions, and report issues to maintainers and vendors.
OpenAI researchers also used the model to identify 81 previously unknown Firefox vulnerabilities classified by Mozilla as high severity and develop working exploits for 948 Linux kernel vulnerabilities. Mozilla has released fixes for many of the Firefox flaws, with the model contributing proposed patches.
Researchers used GPT-6 Cyber alongside other OpenAI models to develop and validate exploits demonstrating how a critical Brotli vulnerability could allow remote code execution in affected applications.
“GPT 6 Cyber is a world-class model for cyberdefense. Firefox entered 2026 as one of the world’s most hardened and scrutinized codebases. Even after further hardening with multiple generations of frontier models, GPT 6 Cyber uncovered previously unknown high-severity vulnerabilities, identified architectural improvements, and helped us ship fixes to millions of users,” said Brian Grinstead, Distinguished Engineer at Firefox.
The company said it added or strengthened safeguards to address the risks posed by the model’s cybersecurity capabilities. These include monitoring for actions outside the user’s…
Originally published by Google News AI
