惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Help Net Security
爱范儿
爱范儿
V
Visual Studio Blog
Last Week in AI
Last Week in AI
阮一峰的网络日志
阮一峰的网络日志
雷峰网
雷峰网
Hugging Face - Blog
Hugging Face - Blog
博客园 - 【当耐特】
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
博客园 - 三生石上(FineUI控件)
博客园 - Franky
博客园 - 叶小钗
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The Cloudflare Blog
大猫的无限游戏
大猫的无限游戏
人人都是产品经理
人人都是产品经理
M
MIT News - Artificial intelligence
罗磊的独立博客
L
LangChain Blog
Jina AI
Jina AI
IT之家
IT之家
J
Java Code Geeks
Microsoft Azure Blog
Microsoft Azure Blog
博客园_首页

Cyber Security News

AIRecon: AI-Powered Penetration Testing Tool with Kali Linux Sandbox Critical Chrome Vulnerabilities Allow Attackers to Execute Arbitrary Code - Update Now! UNC3753 Uses Screen-Sharing Sessions and RMM Tools to Exfiltrate Sensitive Legal Data New OnionDrop Loader Campaign Uses gainmsg C2 to Deliver LegionLoader Payloads ClickFix Campaign Uses EtherHiding and GULoader to Infect Windows Users via Fake CAPTCHA Ghostwriter Hackers Abuse Gmail Admin-Themed Emails to Steal Credentials and 2FA Codes The Half-Life of Threat Intelligence: When Does an IOC Stop Being Useful? Critical Fortinet FortiSandbox Vulnerabilities Actively Exploited in Attacks Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio India Temporarily Bans Telegram Messenger Over Medical Exam Fraud Microsoft 365 Device Code Phishing Campaign Bypasses Password Theft With Legitimate Login Flow AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era Hackers Weaponize Microsoft Teams Relay to Hide Ransomware Traffic Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection Interlock and Rhysida Ransomware Operations Share Supper Backdoor and Malware Codebase Novo Nordisk Confirms Cyber Attack — Hackers Accessed Patient Medical Data and Internal AI Assets Russian and Chinese Influence Actors Use AI to Evade Bot Detection and Mimic Human Behavior Microsoft Teams Analyze the Wi-Fi Hotspot Data Connected to an Employee’s Device PRC-Nexus Hackers Exploit REDCap Servers to Spy on US Medical Research Institutions Infinite Campus Data Breach Exposes 137,000 Users Personal Details OptinMonster Plugin Hack Exposes 1.2 Million Wordpress Sites to Cyberattack Ransomware Ecosystem Consolidates Around LockBit Alumni, Qilin, Hyflock, and The Gentlemen Hackers Abuse Legitimate RMM Tools in The Quarry IRS and SSA Phishing Campaigns LiteSpeed cPanel Plugin 0-Day Vulnerability Actively Exploited in the Wild Cisco SD-WAN vManage Vulnerability Exploited in Zero-Day Attacks Nearly 14,000 SimpleHelp Servers Exposed Amid Critical Authentication Bypass Disclosure Microsoft Site Showing Warning Following Certificate Expiry DPAPISnoop Tool Extracts CREDHIST Hashes for Offline Windows Credential Recovery SHADOWBYT3$ Allegedly Claim Breach of Nintendo, Stealing Sensitive Data Anthropic Updated Privacy Policy to Include Identity Verification for Claude Users
OpenAI Releases GPT‑5.5‑Cyber With Full Automation for Vu...
Guru Baran · 2026-06-23 · via Cyber Security News

OpenAI has officially launched the full version of GPT‑5.5‑Cyber, a specialized AI model engineered for advanced vulnerability detection, patch generation, and automated remediation at machine speed.

The release is part of OpenAI’s broader Daybreak initiative, which aims to democratize defensive cybersecurity capabilities for trusted organizations worldwide.

GPT‑5.5‑Cyber delivers state-of-the-art results across three major cybersecurity evaluation benchmarks:

  • CyberGym: 85.6% (vs. 81.8% for GPT‑5.5), the highest single-model score recorded.
  • ExploitGym: 39.5% (vs. 25.95% for GPT‑5.5), testing exploit generation from known vulnerabilities.
  • SEC-bench Pro: 69.8% (vs. 63.1% for GPT‑5.5), evaluating long-horizon vulnerability discovery across complex software targets.

The model can navigate large codebases, trace attack paths, validate exploitability, generate targeted patches, and produce remediation evidence all within a single automated workflow.

Codex Security Plugin Updated

Alongside the model release, OpenAI has updated the Codex Security plugin, now capable of deep codebase scanning with automated patch generation. Since launching in research preview in March 2026, Codex Security has:

  • Scanned over 30 million commits across more than 30,000 codebases
  • Processed over 70,000 manually verified fixes
  • Automatically resolved over 500,000 findings

The plugin integrates directly into developer workflows, supporting SARIF exports, CodeQL queries, and existing vulnerability management pipelines. It generates severity-rated reports with affected code locations, attack path tracing, and codebase-specific patches for human review.

OpenAI launched Patch the Planet, a collaborative initiative co-founded with Trail of Bits and partnered with HackerOne and Calif, to address the critical vulnerability remediation gap in open-source software. More than 30 open-source projects have committed to participate, including:

  • cURL, Go, Python, Sigstore, and pyca/cryptography

An initial five-day sprint across multiple projects surfaced hundreds of issues, merged dozens of patches, and built reusable fuzzing and variant-analysis workflows. Participating projects receive ChatGPT Pro, conditional Codex Security access, and API credits.

GPT‑5.5‑Cyber is distributed exclusively through a limited release to verified, trusted defenders. It is not available for general use. OpenAI has confirmed Trusted Access for Cyber partnerships with Australia, Canada, France, Germany, Japan, South Korea, and EU institutions, including ENISA.

OpenAI coordinated pre-deployment testing with the Center for AI Standards and Innovation (CAISI) and worked with the Office of the National Cyber Director (ONCD) on the implementation of the June 2026 Executive Order on AI security.

For most organizations, GPT‑5.5 with Trusted Access for Cyber and Codex Security remains the recommended entry point, with GPT‑5.5‑Cyber reserved for defenders requiring the highest capability tier with enhanced monitoring and scoped controls.

OpenAI’s announcement signals a fundamental shift in the cybersecurity threat model. The historical bottleneck of finding vulnerabilities has given way to a new challenge: patching them at scale.

With Daybreak unifying frontier AI models, Codex Security workflows, open-source partnerships, and critical infrastructure collaboration, OpenAI is positioning AI-driven remediation, not just detection, as the next frontier in cyber defense.

Follow us on Google NewsLinkedIn, and X to Get More Instant Updates.

Guru Baran

Guru Baranhttps://cybersecuritynews.com

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.