OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries
OpenAI's GPT-6 Cyber model finds thousands of vulnerabilities in Linux and Firefox.
Run OpenAI?
Get an email when a reviewed story names OpenAI, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
OpenAI has introduced GPT-6 Cyber, an AI model designed for security research, which has reportedly discovered a significant number of high-severity vulnerabilities in Firefox and the Linux kernel. The model demonstrated advanced capabilities in finding and exploiting flaws, outperforming previous versions and other AI models in various cybersecurity benchmarks. OpenAI has consequently raised its own cybersecurity risk rating to Critical.
The lesson from this incident
Full lessonOpenAI's GPT-6 Cyber demonstrates that AI models can now autonomously discover and exploit high-severity vulnerabilities in widely-used software like Firefox and the Linux kernel at a scale and speed that far outpaces traditional human-led research. This fundamentally shifts the threat landscape: attackers who gain access to similar AI tooling could weaponize newly discovered flaws before defenders even know they exist. The window between vulnerability discovery and exploitation is now potentially measured in hours rather than weeks. Organizations that rely on slow, manual patching cycles or periodic vulnerability scans are critically exposed in this new paradigm. This matters because the volume and severity of AI-discovered vulnerabilities will likely overwhelm traditional security operations unless processes are urgently modernized.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.