On 5 November 2026 OpenAI introduced GPT-6 Cyber, a model for finding and validating exploitable vulnerabilities within researcher-set scope. It reports 48.5% on ExploitGym versus 32.1% for GPT-5.6 Cyber and stronger in-scope behaviour (up to 100% with the deployment prompt). Researchers used it for hundreds of Linux privilege-escalation exploits and dozens of high-severity Firefox findings with Mozilla fixes. Initial access is via API and Codex for selected Daybreak Red customers, with Daybreak Blue/Red separation and stronger safeguards for critical infrastructure.

What it means: For Greek AppSec and MSSP teams, GPT-6 Cyber can speed authorised pentests and triage only under contract, sandboxing and clear rules of engagement. The Critical preparedness rating underscores misuse risk; control who can access which targets. Do not point such models at customer systems without written authorisation. OT/ICS operators should review Daybreak options for critical infrastructure. Cost and Daybreak eligibility may exclude smaller teams. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short note citing the primary source without overclaiming. Compliance, security and operations are linked; one change often needs contract, access-rights and continuity checks. Keep a review calendar so the news becomes concrete actions for the Greek business. In practice, teams should name an owner, update the risk register and agree success criteria within 30 days. Where suppliers or customers are affected, send a short note citing the primary source without overclaiming. Compliance, security and operations are linked; one change often needs contract, access-rights and continuity checks. Keep a review calendar so the news becomes concrete actions for the Greek business.

Read the original on OpenAI

Related service: Custom software

Related stories