OpenAI Expands Daybreak Initiative with GPT-5.5-Cyber to Accelerate Vulnerability Patching

OpenAI has announced the release of an improved version of its GPT-5.5-Cyber model as part of the Daybreak initiative, aimed at helping defenders find and patch software vulnerabilities more efficiently. The model is described as OpenAI’s strongest yet for identifying security issues across large codebases, validating them in controlled environments, and developing patches.

Alongside the model update, OpenAI released an update to the Codex Security plugin, which enables developers to run deep scans, generate reports with severity and remediation guidance, trace attack paths, build threat models, and generate codebase-specific patches. The plugin can also triage and validate findings from scanners, advisories, bug-bounty reports, or ticketing systems.

OpenAI also launched a new initiative called Patch the Planet in partnership with Trail of Bits to help secure open-source projects. Initial participants include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, the Go project, freenginx, Python, and python.org.

The Daybreak initiative has already surfaced numerous vulnerabilities, including 8 kernel pointer information leak PoCs and 24 local privilege escalation exploits in the Linux Kernel, a 23-year-old use-after-free in OpenBSD’s kernel implementation of System V semaphores, 34 vulnerabilities and 7 local privilege escalation PoCs in FreeBSD, 6 vulnerabilities in dnsmasq (CVE-2026-4890, CVE-2026-4891, CVE-2026-4892, and CVE-2026-5172), a denial-of-service technique called HTTP/2 Bomb impacting major HTTP/2 implementations, 5 exploitable vulnerabilities in Google Chrome’s V8 JavaScript engine, 10 exploitable Apple Safari vulnerabilities, and a WebAssembly vulnerability (CVE-2026-8390) in Mozilla Firefox.

These developments come as AI models accelerate vulnerability discovery, shifting the bottleneck from finding bugs to patching them. Intelligence agencies from Australia, Canada, New Zealand, the U.K., and the U.S. have warned that advanced AI models can expedite cyber threats, lowering the barrier for malicious actors and shrinking the window between vulnerability discovery and exploitation.