LIVE · cybersecurity feed
Live wire
U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacksCISA Announces Enhanced Reporting Form for Cyber IncidentsCVE-2026-19868 · CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible ExploitationCVE-2026-119757 · BTCPay Server Insufficiently Protected Credentials Flaw Exploited Upon DisclosureCVE-2026-118066 · LatePoint Improper Authentication Vulnerability Exploited Upon DisclosureCVE-2026-120534 · ACF Extended Advanced Custom Fields PRO Flaw Exploited Upon DisclosureCVE-2026-109884 · Elementor Website Builder Flaw Exploited Same Day As DisclosureCVE-2026-19868 · SonicWall SonicOS SSLVPN Vulnerability Exploited On Day Of DisclosureCVE-2026-103898 · Wpmet wp_social_login_and_register_social_counter Flaw Exploited Upon DisclosureCVE-2026-116512 · weDevs wp_project_manager Flaw Exploited Before CVE Publication
vulnerability

OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits

OpenAI has officially unveiled GPT-6 Cyber, a specialized iteration of its large language model architecture designed specifically for cybersecurity research. The company reports that the new model integrates enhanced defensive capabilities with significant advancements in alignment technology, aiming to improve both the identification of software vulnerabilities and the reliability of the…

ZeroDay News ·

Source: The Hacker News

OpenAI has officially unveiled GPT-6 Cyber, a specialized iteration of its large language model architecture designed specifically for cybersecurity research. The company reports that the new model integrates enhanced defensive capabilities with significant advancements in alignment technology, aiming to improve both the identification of software vulnerabilities and the reliability of the model when operating within predefined safety constraints.

The technical mechanism behind GPT-6 Cyber focuses on automating the discovery and remediation of security flaws within complex codebases. According to the announcement, the model has already demonstrated its utility in large-scale testing environments, where it reportedly assisted in the identification of 81 vulnerabilities within the Firefox browser and 948 potential exploits within the Linux kernel. These results suggest a shift toward using generative AI to perform deep static and dynamic analysis at a scale that exceeds traditional manual auditing processes.

The affected software environments, such as the Linux kernel and major browser engines, represent critical infrastructure that is frequently targeted due to the high impact of successful exploitation. Vulnerabilities in these categories often involve memory corruption, logic errors, or race conditions that require significant expertise to uncover. By leveraging machine learning models to parse millions of lines of code, researchers aim to accelerate the discovery of these bugs before they can be weaponized by malicious actors.

For organizations integrating AI-driven vulnerability research into their workflows, typical mitigation guidance involves maintaining human oversight to verify the validity of findings. Because automated tools can occasionally generate false positives or suggest remediation strategies that introduce new security regressions, industry best practices dictate that AI-generated patches should undergo rigorous regression testing and manual code review before deployment into production environments.

The release of GPT-6 Cyber reflects a broader industry trend toward the automation of offensive and defensive security research. As AI models become increasingly proficient at navigating complex software architectures, the focus of the cybersecurity community is shifting toward how these tools can be balanced to ensure that the capacity for finding flaws is matched by a robust framework for ethical deployment and responsible disclosure.

vulnerabilitypatchaicloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
vulnerability

Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes

Anthropic has officially released Claude Mythos 5.2 and Claude Fable 5.2, the latest iterations of its AI models designed for specialized security and general-purpose tasks. While both models share the same underlying architecture, they differ significantly in their operational guardrails. Mythos 5.2 is an access-restricted model intended for vetted organizations participating in Anthropic’s…

CVE-2026-123218

IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to remediate two critical vulnerabilities currently being exploited in the wild. The agency added CVE-2026-123218, affecting IBM Aspera Faspex, and CVE-2026-116779, impacting SignalWire FreeSwitch, to its Known Exploited Vulnerabilities (KEV) catalog. Under the requirements of…

vulnerability

Google patches eighth Chrome zero-day exploited in attacks this year

Google has issued an emergency security update for its Chrome web browser to address a high-severity vulnerability that is currently being exploited in the wild. This flaw, tracked as CVE-2026-125350, marks the eighth zero-day vulnerability patched by the company since the beginning of 2026.

nation-state

IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus

Ireland faces a critical need to bolster its national security infrastructure to counter a rising tide of sophisticated cyberattacks and hybrid threats. Ahead of the IRISSCON 2026 conference held at Dublin’s Aviva Stadium, experts have characterized the current state of national readiness as potentially inadequate. The discourse centers on the necessity of moving beyond isolated defensive…

security

Default Admin Password Let Researchers Unlock and Start Cars

Security researchers Shubham Shah and Sam Curry have disclosed a series of vulnerabilities that allowed them to remotely unlock and start vehicles by compromising the identity management infrastructure of two unnamed automotive brands. The researchers detailed their findings in separate reports published in early November 2026, noting that the flaws affected customer accounts across the United…

breach

Binance Investigates ShinyHunters Breach Claims

Binance is currently investigating claims made by the threat actor group ShinyHunters, which alleges it has successfully breached the cryptocurrency exchange’s systems. On November 4, 2026, the group posted an advertisement on the PwsForums platform, asserting that it had obtained approximately 335.9 million records. The attackers are demanding a payment of $900,000, threatening to leak the…