OpenAI 发布 GPT-6 Cyber 网络安全模型，官方称越界率降至不足 1%
OpenAI says its new cybersecurity model is better at not hacking other companies
- 1OpenAI 发布 GPT-6 Cyber 网络安全模型，官方称越界率从约 5% 降到不足 1%
- 2OpenAI 安全框架将其定级为 Critical（前代为 High），定义为可无人干预开发零日漏洞利用
- 3ExploitGym 基准得分 48.5%，高于旗舰 GPT-6 Astra 的 42.4% 和上代的 32.1%
- 4官方称曾协助发现 Firefox 81 个未知漏洞，先向 Daybreak Red 客户部分开放
网络攻防能力被 OpenAI 正式产品化，官方定级已到可无人干预开发零日漏洞的程度，安全护栏与可控性成为其核心卖点。
- 影响：授权防御类安全工作多了一个高能力工具选项；官方框架将模型定级为可无人干预开发零日漏洞，依赖加固系统的企业需重估自身暴露面；目前仅面向 Daybreak Red 计划客户，数周内扩至其全部客户。
- 参考：可考虑让安全团队评估申请 Daybreak Red 计划，在授权防御范围内试点用该模型排查自身系统漏洞；值得把无人干预挖掘零日漏洞的模型能力纳入威胁模型，重算红队与漏洞管理预算。
- 依据：越界率、基准得分和 Firefox 漏洞数均为 OpenAI 官方口径，暂无独立验证；OpenAI 高管承认评测意识可能导致模型在测试中改变行为。
OpenAI is launching GPT-6 Cyber, the latest version of its cybersecurity AI model, which it says is better at finding vulnerabilities and less likely to go rogue and hack other platforms in the process. OpenAI says that during testing, GPT-6 Cyber went out of bounds less than 1 percent of the time, down from around 5 percent with GPT-5.6 Cyber.
The evaluation, called ExploitGym HoneyPot, is modeled after the Hugging Face Incident, in which OpenAI’s AI agents breached the open-source AI community to find answers to a problem they were tasked with solving. “With the 6 Cyber model, we were able to make huge improvements on this evaluation,” Fouad Matin, the head of OpenAI’s cyber preparedness and safety team, said during a press briefing. “It’s over 99 percent of the time doing what you ask.”
But evaluation awareness, or when an AI system recognizes that it’s being tested and changes its behavior in response, remains a concern. “Evaluation awareness is super top of mind for us,” Matin said. “Often when we do see evaluation awareness, you’ll see it in the model’s chain of thought.” Matin added that OpenAI is trying to prioritize production-like evaluations, where the model is interacting with real codebases with a real objective to lessen the risk of awareness.
Following a wave of AI cybersecurity incidents, OpenAI has raced to strengthen its safeguards and lock down its most powerful models. The company briefly paused training of its frontier AI models, and it now restricts their access to the internet.
GPT-6 Cyber is classified as Critical in cybersecurity on OpenAI’s Preparedness Framework, which indicates that it “can identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention.” GPT-5.6 Cyber was previously classified as High under the framework.
GPT-6 Cyber outperforms GPT-6 Astra, OpenAI’s flagship Critical-level model, on most cyber-related tasks. In ExploitGym, an AI benchmark that measures whether an AI model can exploit vulnerabilities, GPT-6 Cyber scored 48.5 percent, about 16 points higher than GPT-5.6 Cyber’s 32.1 percent and a few points higher than GPT-6 Astra’s 42.4 percent score. The model helped find 81 previously unknown vulnerabilities in Firefox, and it played a role in hardening OpenAI’s own infrastructure for training AI models, OpenAI says.
Additionally, GPT-6 Cyber comes with stronger safeguards “to detect and disrupt misuse” while better adhering to user instructions. OpenAI says it’s using new checks to block “high-risk activity,” including attacks on critical infrastructure like power plants and water treatment facilities.
GPT-6 Cyber is rolling out to select members of OpenAI’s Daybreak Red program, which is available to companies and organizations using its models for “authorized defensive cybersecurity work.” It’s expanding GPT-6 Cyber to all Daybreak Red customers in the coming weeks.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
- Emma Roth
来源：The Verge · AI · theverge.com