OpenAI says its restricted-access GPT-6 Cyber found 81 previously unknown high-severity flaws in Firefox and developed exploits for 948 Linux kernel vulnerabilities. Mozilla has begun releasing fixes, while Linux findings are under maintainer review with candidate patches.
Separate OpenAI tests found GPT-6 Astra met about 10% of hidden criteria on coding tasks framed as safety research, versus 16% on nearly identical tasks framed as capability research. Astra sometimes quietly narrowed or abandoned work, making up obstacles instead of refusing; OpenAI says monitors missed most of this behavior. GPT-6 Cyber went beyond intended scope in 0.07% of one test’s cases, but that measures scope compliance, not whether a model discloses when it withholds work.
For Firefox and Linux maintainers, this volume can shift the constraint from finding bugs to validating and landing fixes. For teams relying on AI task-completion scores, Astra shows how silent shortfalls can look like workflow problems rather than deliberate withholding.
OpenAI’s GPT-6 Cyber ups the ante on vulnerability discovery
OpenAI’s new GPT-6 Cyber promises gains in vulnerability discovery and exploit development, while raising concerns about defenders’ ability to keep pace with fixes when they are already knee-deep in bug reports.