OpenAI's GPT-6Cyber found 948 Linux kernel privilege-escalation bugs at $1,279 per exploit

赛博禅心 · wechat · 2026-11-06

OpenAI released GPT-6Cyber (DaybreakRed tier), rated Critical in its Preparedness cybersecurity scale. Highlights: an automated pipeline scanned the latest Linux kernel — filtering 2.8M of 40M lines reachable by unprivileged users, surfacing 2,308 suspects in 12 hours, confirming 1,724, and achieving root on default-hardened desktops (SMEP/SMAP/KASLR) for 948 unique bugs; 304 of the worst were reported to maintainers. Average API cost per exploit: $1,279. The same flow with GPT-5.6Sol found only 166 in July. The model also found 81 new high-severity Firefox bugs (41 of the 108 fixed in Firefox 159 were OpenAI's reports). In a Dragos mock power plant test, it autonomously segmented OT from IT and found two 0-days exposing breaker trip logic; new blocks now cover ICS/election-system requests. Access is split into DaybreakBlue (GPT-6Astra, lighter restrictions) and DaybreakRed (strict vetting, SSO/MFA/IP allowlists), plus a $1B fund for critical infrastructure defenders and the Codex Security scanning tool.

Related event: OpenAI Launches GPT-6 Cyber, a Security-Focused Model in Limited Release(17 posts)→

Original post →

More from Models

Models channel →