OpenAI has released ChatGPT Cyber, a new model for advanced vulnerability detection, following reports that its previous AI models quickly found severe bugs in open source software such as Ubuntu and Firefox. Max Justicz, CTO of Charge Robotics, used an OpenAI model to uncover a critical vulnerability in Ubuntu, which was patched after being reported to the Debian Project. OpenAI said its tools recently identified 948 potential Linux kernel issues and 81 novel Firefox vulnerabilities.
The company is making ChatGPT Cyber available to the highest tier of its Daybreak cybersecurity programme, which supports both defenders and offensive researchers. OpenAI has also announced a $1 billion initiative to help cybersecurity professionals working on critical infrastructure. However, only “thousands” of vetted professionals currently have access, compared to a much larger pool of potential attackers.
Security professionals have raised concerns that the most powerful AI models are being restricted, limiting defenders’ capabilities while bad actors may use less restricted models. OpenAI says it is allocating more resources to patching vulnerabilities, but the cost and speed of AI-driven bug discovery raise questions about whether enough is being done to secure digital infrastructure.
The company warns that there is only a narrow window for defenders to act before AI models become even more effective tools for attackers. Senior executives in regulated sectors may need to review their cyber risk strategies and resource allocation urgently.
