OpenAI Launches GPT-5.6-Cyber as AI Security Threats Grow

OpenAI is expanding its Daybreak cyber defence service and introducing GPT-5.6-Cyber, a specialised model designed for advanced cybersecurity work, as AI systems become increasingly capable of finding and exploiting software vulnerabilities.

The expansion comes amid growing attention to AI-led security incidents, including cases involving systems accessing unintended networks, exploiting vulnerable websites and using social engineering techniques. AI developers are responding by expanding tools intended to put similar capabilities in the hands of cybersecurity defenders.

OpenAI expands Daybreak with Blue and Red tiers.

OpenAI launched Daybreak earlier this year as a cyberdefence service combining access to AI models, tools and workflows for security professionals. The company said Monday that it is expanding the program into two tiers, called Daybreak Blue and Daybreak Red.

Both tiers provide approved customers with access to OpenAI’s limited-access frontier cyber models. The company has previously placed significant safeguards around its most capable cybersecurity systems because of the potential for the same capabilities to be used offensively.

Daybreak Blue is positioned as the starting point for most security teams. It includes capabilities for incident response, malware analysis and patch validation, among other defensive cybersecurity tasks.

OpenAI describes Blue as its “recommended starting point for most defenders,” indicating that the tier is designed to cover common enterprise security needs without providing the broader capabilities available through Red.

GPT-5.6-Cyber arrives with Daybreak Red.

Daybreak Red provides access to a more advanced set of cybersecurity capabilities. OpenAI says the tier includes purpose-trained cybersecurity models intended for authorised security testing and vulnerability research.

The centrepiece of Red is GPT-5.6-Cyber, a new specialised model available only through that tier. OpenAI says GPT-5.6-Cyber is based on GPT-5.6 Sol and has enhanced capabilities for specific cybersecurity tasks.

Access is initially restricted to trusted customer partners. According to the source reporting, companies participating include Accenture, IBM, CrowdStrike and Cloudflare, among others.

AI-powered cyber threats drive defensive push.

The release comes as major AI developers face growing questions about the cybersecurity capabilities of increasingly autonomous models. Recent incidents have demonstrated that AI agents can identify weaknesses and take actions that were not necessarily anticipated by their operators while pursuing assigned objectives.

OpenAI argues that defenders need access to increasingly capable tools as attackers begin incorporating AI into cyber operations.

“The cybersecurity world is rapidly changing—threat actors will increasingly use AI to conduct cyberattacks at unprecedented speed and scale, including in fully autonomous ways,” OpenAI said.

The company added that defenders have a narrowing window to prepare as those capabilities become more widely available.

Other AI developers are also building specialised cybersecurity systems. Anthropic has introduced Mythos, a cyber-focused model designed around security-related capabilities.

Powerful cyber models remain tightly controlled.

The expansion of Daybreak reflects the challenge facing AI developers as their models become more capable at cybersecurity tasks. The same technical abilities that can help defenders identify vulnerabilities, analyse malware, and validate security fixes can carry additional risks if used for offensive purposes.

OpenAI is addressing that tension by limiting access to its frontier cyber models and separating Daybreak into different levels of capability. GPT-5.6-Cyber remains restricted to Daybreak Red and trusted partners rather than being offered as a broadly available model.

For enterprises, the expansion also creates another option for obtaining AI-powered cybersecurity capabilities directly from a major model developer. OpenAI bets that as AI becomes a more significant part of cyberattacks, organisations will increasingly seek similarly advanced AI systems to help defend their networks.