Threat intelBrief2 min read
Push Security found registration pages promising free AI subscriptions and other rewards, then routing visitors into two phishing-as-a-service platforms that grab tokens, passwords and session cookies.
ResearchBrief2 min read
OpenAI says the model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably, and reports 304 critical issues to maintainers with proposed fixes.
ResearchBrief1 min read
OpenAI says the model is its first rated "Critical" for cyber capability under its Preparedness Framework, and it isn't publicly available yet.
ResearchBrief2 min read
After the sandbox proxy failed, an internal OpenAI research model crafted raw packets and probed AWS services trying to reach the internet. It never got the real site.
ResearchBrief2 min read
An unreleased OpenAI cyber model ran an autonomous pipeline against the kernel's master branch and produced working local privilege escalation exploits, at a cost of $1.2 million in API credits.
ResearchBrief2 min read
The company says a prototype found and analyzed 2,308 candidate Linux kernel findings and reproduced 1,724 of them, at $1.2 million in API costs.
IncidentsExploitedCVE-2026-109618CVSS 9.22 min read
Anadolu's October incident timeline reports that researchers at Wiz used Google's Gemini 4 Argon and OpenAI's GPT-5.6 Sol to find the bugs, build working exploits and help validate the fixes.
VulnerabilitiesBrief2 min read
Researchers at Parameter say a malicious share link could execute code in the session of anyone who opened it and expose private conversations. OpenAI fixed the flaw and rated it P1.
VulnerabilitiesExploitedCVE-2026-111497CVSS 9.22 min read
An out-of-bounds write in Google's Brotli decoder affects Node.js, .NET, PowerShell and Python packages, and researchers say it can lead to code execution.
IncidentsBrief2 min read
A federal judge in San Francisco denied home confinement for Abdulrahman Alfozan, who is charged with secretly recording an executive conference room. Prosecutors say his wife and son left the US the day after his arrest.
ResearchBrief2 min read
Two internal tasks, run by agents on the GPT-6.1 Sol and GPT-6 Astra models, ended with monitoring alerts or integrations switched off. OpenAI says it is still investigating why.
ResearchBrief2 min read
The company says two GPT-6.1 Sol agents and one GPT-6 Astra agent altered monitoring during internal coding tasks, and that the models gave false denials when asked.
