OpenAI's New Security Model is for 'Critical Cyber Defenders' Only

Posts from this topic will be added to your daily email digest and your homepage feed.

TL;DR

OpenAI is launching a new cybersecurity model, GPT-5.5-Cyber.
The model will not be available to the general public but will be rolled out to trusted "cyber defenders."
CEO Sam Altman announced the limited rollout will occur in the "next few days."
OpenAI has not yet released specific technical details or capabilities of the model.
This follows a trend of AI companies limiting public access to advanced models due to potential misuse.
OpenAI has previously staggered the release of cybersecurity-focused and life sciences models.
The White House has shown interest in advanced AI models like Anthropic's Claude Mythos, opposing wider access due to cybersecurity concerns.

Continue reading the original article

we're starting rollout of GPT-5.5-Cyber, a frontier cybersecurity model, to critical cyber defenders in the next few days.

we will work with the entire ecosystem and the government to figure out trusted access for cyber; we want to rapidly help secure companies/infrastructure.

Sam Altman

we'd like to help companies secure themselves and we think it's important to start work on this quickly

Yann LeCun reposted

Daniel Jeffries

We are less safe as a society by keeping Mythos (or any other smart model) tightly gated so only a few companies get it.

Protecting 100 companies is not enough. There are 96 million open source projects on Github alone.

What about securing all of those projects?

What about the other $820 billion worth of closed source software that has hidden cracks too?

It's like patching a 100 buildings in a city of 10 million buildings and saying we just saved the city. You did not.

Open source alone alone has an estimated economic value of 8.8 trillion dollars to say nothing of its societal value. It is embedded in almost every other piece of software, closed or open on the planet.

Society becomes stronger by wider distribution of technology not by adding gatekeepers.

When we tried to gatekeep encryption, the gates were so high that most Americans didn't even bother getting the 128 bit encrypted browser. They just used the easier to get 40 bit one that was totally unsafe. When we finally took the restrictions away the era of ecommerce took off like a rocket because now it was feasible.

The world did not become smarter in the era of the monks scribbling every text by hand in caves in the dark ages. It became smarter when we scaled reading, and as a byproduct, intelligence, with the printing press.

Wide distribution raises the bar for everyone and makes society safer and more secure. Simple as that.

It's counterintuitive but also true.

Sam Altman

OpenAI is launching Daybreak, our effort to accelerate cyber defense and continuously secure software.

AI is already good and about to get super good at cybersecurity; we'd like to start working with as many companies as possible now to help them continuously secure themselves.

Satya Nadella

Our new multi-model agentic security system brings together more than 100 specialized agents across frontier and custom models to find exploitable bugs, delivering top performance on the CyberGym benchmark.

We used it ahead of Patch Tuesday to help find and fix 16 vulnerabilities. Today we’re announcing that customers can sign up to test it in private preview.

https://t.co/maAN55yZQ1

Dario Amodei

Replying to @DarioAmodei

In addition to transparency, I now believe frontier models should face mandatory third-party testing for cyber, bio, and autonomy risks—with the power to block or revoke deployment of models that pose catastrophic risk.

clem 🤗 reposted

Andrew Curran

David Sacks on cyber guardrails. It's difficult to say how much of this is directed at Anthropic and OpenAI, and how much is directed at the administration. https://t.co/FnGlZwrOof

clem 🤗 reposted

David Sacks

Replying to post

Here’s another example: Hugging Face tried using American frontier models to analyze an AI-powered cyber attack. But the guardrails blocked requests containing real exploit payloads so they switched to GLM 5.2 running locally. The guardrails actually impaired defensive security.

clem 🤗 reposted

Zixuan Li

Open-weight models carry real responsibilities.

Hugging Face’s disclosure describes how GLM-5.2 was used in a self-hosted forensic workflow during a time-sensitive cyber incident, keeping sensitive attacker data and credentials within Hugging Face’s own environment. This demonstrates the practical value of responsibly deployed models for defensive cybersecurity and incident response.

I just spoke with the Hugging Face team last week, and we are optimistic about the path ahead. We will continue to strengthen our cybersecurity and broader safety evaluations, improve documentation and secure deployment guidance, and work with the broader ecosystem to advance the responsible development and deployment of open-weight models.

https://t.co/9emaJe12mx

clem 🤗

The cybersecurity debate on open-source AI is backwards. Open models aren't the risk, they're the defense! Attackers can already jailbreak any API or guardrails. Defenders can't secure systems with black boxes they can't control, inspect, test, or run locally. https://t.co/OiQ4sMd2gW

clem 🤗 reposted

Bryan Catanzaro

Open models are more secure.

Greg Brockman

OpenAI cyber-capable models compromised @huggingface production by finding and chaining multiple zero-day vulnerabilities.

Grateful to Hugging Face for partnership here. Sharing our findings to help calibrate on what models can now do, and how they can help defenders: