OpenAI 发布 GPT-6 Cyber：专注漏洞挖掘与利用
OpenAI 出了个专挖漏洞的 GPT-6 Cyber，Linux 内核找 bug 数量是前代的十倍，连 Mozilla 都在忙着修它报的洞。
OpenAI 发布网络安全模型 GPT-6 Cyber，目前仅向获批的 Daybreak Red 客户开放 API 和 Codex 访问。在真实软件测试中，它确认了 1,724 个 Linux 内核漏洞并为其中 948 个构建了可用攻击，GPT-5.6 Sol 同条件下只做到 166 个。它还发现了 81 个此前未知的 Firefox 严重漏洞，Mozilla 已为其中多数发布修复。因攻击能力过强，OpenAI 将其定为最高网络安全风险等级 Critical，并通过 ExploitGym Honeypot 测试约束其越权行为，无部署提示词时 99.93% 的测试中拒绝诱饵服务，前代为 94.49%。
OpenAI released GPT-6 Cyber, a model built to find and exploit software vulnerabilities without straying outside authorized targets.
Right now only a select group of approved Daybreak Red customers can use it, through the API and Codex.
> On real software, it confirmed 1,724 Linux kernel bugs and built working attacks for 948 of them, while GPT-5.6 Sol, tested the same way, managed 166.
> It also found 81 serious Firefox bugs nobody knew about, and Mozilla has already released fixes for many of them.
> Because the model is this good at attacking, OpenAI rates it Critical, its highest cyber-risk level
> That gain came with training to keep the agent inside the scope a researcher authorizes. ExploitGym Honeypot tests that by planting easy-to-hack side services, such as a package registry, whose compromise also reveals the task’s flag.
Without its deployment prompt, the model ignored that bait in 99.93% of tests, against 94.49% for its predecessor, and in 100% with the prompt.
