AI Read the original on Thehackernews 2 min read 0

OpenAI releases GPT-5.5-Cyber to bolster software security

OpenAI has officially released an enhanced version of its GPT-5.5-Cyber model to trusted security defenders as part of the Daybreak initiative. This specialized AI tool is designed to identify, validate, and patch software vulnerabilities across expansive codebases with high precision. By providing automated remediation guidance and threat modeling, OpenAI aims to assist developers in closing security gaps faster than traditional manual methods allow.

OpenAI releases GPT-5.5-Cyber to bolster software security — ілюстрація до новини в рубриці «ШІ»
OpenAI releases GPT-5.5-Cyber to bolster software security — ілюстрація до новини в рубриці «ШІ» · Image source: Thehackernews

According to Thehackernews, OpenAI is expanding its Daybreak initiative by deploying the GPT-5.5-Cyber model specifically for cybersecurity professionals. This iteration is described as the company's most capable tool for detecting software flaws and generating corresponding patches. The model is engineered to perform deep analysis on large codebases, allowing it to validate security issues in controlled environments while simultaneously developing remediation steps.

Enhanced tools for vulnerability management

Alongside the new model, OpenAI is updating its Codex Security plugin to streamline the discovery and patching of existing system vulnerabilities. The update provides developers with a suite of automated capabilities designed to prevent new bugs from entering production environments. These features include:

  • Running deep scans on recent code changes to generate severity reports.
  • Tracing potential attack paths and building comprehensive threat models.
  • Validating findings from bug-bounty reports, scanners, and ticketing systems.
  • Generating codebase-specific patches for human review at scale.
  • These advancements address a growing bottleneck in the industry where AI has made finding vulnerabilities easier, but the sheer volume of bugs now overwhelms maintainers who must manually verify and fix them.

    The Patch the Planet initiative

    To further support the ecosystem, OpenAI is launching "Patch the Planet" in partnership with Trail of Bits. This program focuses on securing critical open-source projects by providing security engineers with the resources to develop patches and reusable discovery workflows. Initial participants include major projects such as Python, cURL, NATS Server, and the Go project.

    Addressing AI-driven cyber threats

    The move comes amid rising concerns regarding how frontier models might empower bad actors. The Canadian Centre for Cyber Security recently warned that organizations must prepare for AI-driven exploitation that could outpace a vendor's ability to release corrective measures. By providing these tools to defenders, OpenAI hopes to balance the scales of cyber warfare. The Daybreak initiative has already successfully identified numerous flaws, including 24 local privilege escalation exploits in the Linux Kernel and several vulnerabilities in dnsmasq.

    OpenAI emphasizes that Patch the Planet will operate with appropriate access, governance, and human oversight to ensure these powerful capabilities are used responsibly by defenders. This strategic rollout marks a significant shift toward using generative AI as a proactive shield for global software infrastructure.

    FAQ

    What is the purpose of GPT-5.5-Cyber?
    GPT-5.5-Cyber is a specialized AI tool designed for cybersecurity professionals to identify, validate, and patch software vulnerabilities across large codebases. It provides automated remediation guidance and threat modeling to help developers close security gaps faster than manual methods.
    What projects are included in the Patch the Planet initiative?
    The Patch the Planet program focuses on securing critical open-source projects. Initial participants include major projects such as Python, cURL, NATS Server, and the Go project by providing engineers with resources to develop patches and discovery workflows.
    What vulnerabilities has the Daybreak initiative already identified?
    The Daybreak initiative has successfully identified numerous flaws, including 24 local privilege escalation exploits in the Linux Kernel and several vulnerabilities in dnsmasq.
    Telegram

    Fresh news on our Telegram

    Get instant alerts for new posts in «AI»

    @proaiandevenmore