AI Coding Live News

OpenAI Launches GPT-6 Cyber: ExploitGym 48.5%, Out-of-Scope Rate Down to 0.07%, Daybreak Red Select Access, Critical Preparedness

On November 5 OpenAI launched GPT-6 Cyber for authorized security research: ExploitGym rose from GPT-5.6 Cyber's 32.1% to 48.5% (about 51% relative), out-of-scope exploitation fell to 0.07% without deployment prompts and 0% with them. The model helped find 81 novel high-severity Firefox bugs and develop exploits for 948 Linux privilege-escalation cases, and OpenAI raised its Preparedness Framework cyber rating from High to Critical. It is initially available via API and Codex to select Daybreak Red customers, with expansion to all Red customers planned.

OpenAI Launches GPT-6 Cyber: ExploitGym 48.5%, Out-of-Scope Rate Down to 0.07%, Daybreak Red Select Access, Critical Preparedness

Key Takeaways

  • ExploitGym 48.5% vs GPT-5.6 Cyber 32.1% (~51% relative gain; vendor figures)
  • Scope alignment: 99.93% avoided out-of-scope services without deployment prompts; 100% with them
  • Real-world: 81 novel high-severity Firefox vulns; 1,724 Linux vulns reproduced, 948 exploits developed
  • Preparedness raised to Critical; RemoteExploitBench 95% completion (Astra refused 100%)
  • Select Daybreak Red via API/Codex first; Daybreak Blue alpha for Astra defensive use expanding
Read full story
Linked Models & Agents:

Epoch AI: open-weight GLM 5.3 autonomously exploited the patch gap in six Firefox releases for about $1,000 each

Epoch AI reported on Oct 29 that, in a deliberately basic setup emulating an unsophisticated attacker, Z.ai's open-weight GLM 5.3 read security fixes that were public but not yet shipped and autonomously built exploit chains for all six Firefox releases from Sep 17 to Oct 26, letting a single webpage visit read local files. Marginal cost was about $1,000 per version and the fastest run took 12 hours. Mozilla patched a previously undisclosed bug the model also used in Firefox 159.0 on Oct 27.

Epoch AI: open-weight GLM 5.3 autonomously exploited the patch gap in six Firefox releases for about $1,000 each

Key Takeaways

  • 6 of 6: every Firefox release from Sep 17 to Oct 26 was compromised using only information public at each release (Epoch report)
  • About $1,000 marginal cost per version, with a 48-hour budget and the fastest run at 12 hours; total Firefox research spend exceeded $100,000 including setup
  • The model also rediscovered an unpublished bug on each attempt, which Mozilla fixed in Firefox 159.0 on Oct 27
  • No refusals or safeguards triggered through first-party or third-party APIs
  • Roughly $100,000 of attempts against Chrome failed so far, which Epoch says is not strong evidence Chrome is safe
Read full story

Mistral AI Partners with Mozilla for Firefox Smart Window and Closes €3B Series D

Mistral AI announced a strategic partnership with Mozilla to power the new Firefox Smart Window with privacy-preserving local and cloud models. Mistral also closed a landmark €3 billion Series D funding round, elevating its valuation beyond €21 billion.

Key Takeaways

  • Partners with Mozilla to build Firefox Smart Window with local-first privacy safeguards
  • Combines on-device small models with cloud-grade Mistral Large hybrid inference
  • Secures €3B Series D funding, marking the largest European tech venture round
Read full story

Mistral × Mozilla: Firefox Smart Window (Beta) Powered by Mistral With Zero Data Retention

Mistral and Mozilla announced that Firefox Smart Window (beta), Mozilla’s AI browsing assistant, is now powered by Mistral models—starting in France and North America, with the UK and Germany expected later this year. Conversations are not saved on Mozilla servers by default, and partners agree to zero data retention, stressing open distribution, regional fine-tuning, and user-controlled AI browsing.

Key Takeaways

  • Firefox Smart Window (beta) is now powered by Mistral, launching in France and North America with UK and Germany expected later this year
  • Privacy by default: conversations are not saved on Mozilla servers; partners including Mistral agree to zero data retention
  • Framed as open-source advocates partnering on regional language fine-tuning and open AI distribution in the browser
Read full story
Linked Models & Agents:
ADSponsored