CONNECT WITH US
AI & Deeptech

AI & Deeptech

OpenAI’s GPT-6 Cyber boosts exploit score by 51%, beats GPT-6 Astra in cyber tasks

Interesting Engineering – AI & Robotics logo

Published on

Add as a preferred source on Google
OpenAI’s GPT-6 Cyber boosts exploit score by 51%, beats GPT-6 Astra in cyber tasks

OpenAI has introduced GPT-6 Cyber, a specialized cybersecurity model that can identify software vulnerabilities and develop working exploits, while showing improved ability to stay within the boundaries of authorized security testing.

The new model scored 48.5% on ExploitGym, a benchmark that tests whether models can exploit specified vulnerabilities in remote targets. This represents a 51% relative improvement over GPT-5.6 Cyber, which scored 32.1%.

OpenAI said GPT-6 Cyber also outperforms its general-purpose GPT-6 Astra model on most cybersecurity tasks, even when Astra does not refuse the requests.

The company has classified GPT-6 Cyber as Critical in cybersecurity under its Preparedness Framework, up from High for its predecessor. The classification reflects the model’s stronger ability to understand software, identify vulnerabilities, and develop working exploits.

One of the most notable demonstrations of the model’s capabilities came from a vulnerability research campaign involving Mozilla’s Firefox browser.

OpenAI researchers used GPT-6 Cyber to uncover 81 previously unknown vulnerabilities that Mozilla classified as high severity. The model also identified 30 previously reported issues that were more serious than initially assessed.

The researchers provided Mozilla with evidence, reproducible tests, and proposed patches to help its engineers address the flaws. Mozilla has since begun releasing fixes for many of the reported vulnerabilities.

OpenAI also developed a new evaluation for offensive web penetration testing, in which models probe web applications without access to their source code. GPT-6 Cyber achieved 40.3% recall of vulnerabilities, compared with 32% for GPT-6 Astra.

Unlike conventional vulnerability assessments that examine source code, the web penetration test required GPT-6 Cyber to identify weaknesses by interacting directly with live web applications.


Source link
Related Topics:AI & Deeptech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.