OpenAI has updated GPT-5.6 Sol, the model behind ChatGPT for Plus and Pro subscribers, and pushed a new model, GPT-5.6 Luna, out to everyone using the free tier. The company is also removing the rate limit on text conversations for free users, allowing them to keep chats going without waiting for the limit to reset. For Plus and Pro accounts, GPT-5.6 Sol now handles both quick replies and longer r

OpenAI has announced significant updates to its ChatGPT service, including the removal of text chat rate limits for free users and the introduction of enhanced safeguards for younger individuals. The company is rolling out new models, GPT-5.6 Sol and GPT-5.6 Luna, which aim to improve accuracy and provide more focused responses.
Free and Go tier users are being migrated to GPT-5.6 Luna as their default model, with text chat rate limits for these users being eliminated starting next week. While text conversations will become unlimited, other functionalities such as file uploads and image processing will retain their existing limits. Free users will also gain a new "Think" button for more in-depth reasoning on complex queries.
For Plus and Pro subscribers, the updated GPT-5.6 Sol model is now available. This model integrates both quick replies and longer reasoning into a single system, replacing the previous Instant and Thinking modes. OpenAI states that this change is designed to deliver more precise answers, adapt detail levels to the specific question, and avoid unnecessary formatting. A new slider allows these users to adjust the reasoning effort the model applies to a response. The version of Sol powering Work and Codex remains unchanged.
OpenAI reports a notable reduction in factual errors with the new models. Internal tests on prompts related to finance, medicine, and legal topics showed that answers containing at least one factual error were approximately 62 percent less common with Luna and 68 percent less common with Sol, compared to the outgoing GPT-5.5 Instant model.
The company has also expanded its safeguards for users under 18 with GPT-5.6 Sol. The model has been specifically trained to avoid romantic roleplay, age-restricted challenges, and presenting itself as a substitute for human relationships. New age-related boundaries have been implemented to address issues such as sexual material, eating disorders, body image risks, age-restricted goods, dangerous activities, and graphic violence. When a teen might require support, the model is designed to encourage connection with trusted individuals. OpenAI has reinforced this training with system-level protections and new evaluations for model performance with younger users.
In terms of security, OpenAI tested the GPT-5.6 models against adversarial prompts designed to bypass refusal training, known as jailbreaks. The evaluation utilized challenging multi-turn jailbreaks derived from internal red-teaming exercises and excluded additional production safeguards like classifiers. GPT-5.6 Sol performed comparably to its recent predecessors and was similar to GPT-5.5 Thinking in these tests.
For prompt injection attacks, which embed adversarial instructions in tool output to override system, developer, or user instructions, GPT-5.6 Sol demonstrated strong resistance. In the connector evaluation, Sol scored 1.000, matching GPT-5.5 and improving upon GPT-5.4 Thinking's score of 0.998. On a separate evaluation for search and function-calling, Sol achieved a score of 0.910.

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is publishing early

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate all credentials and secrets that may have been used to run their Cadence executions," JetBrains said.
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

OpenAI has announced a $1 billion commitment to provide subsidized access to its Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. The initiative, named Daybreak for Frontline Defenders, will offer AI models, training, and technical support over the next six months, prioritizing water and wastewater utilities, electric grid operators, and local government entities. This move aims to equip organizations with limited budgets and staff against increasingly sophisticated cyber threats.
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.