AI Sec Watch

OpenAI is launching the Daybreak Cyber Partner program to give security companies access to advanced AI models designed to help find and fix software vulnerabilities faster. Through partnerships with firms like Accenture, IBM, Palo Alto Networks, and CrowdStrike, organizations can now use frontier AI models (cutting-edge AI systems) built into security tools and services they already use, rather than building their own AI security programs.

OpenAI is expanding Daybreak, a program that gives approved cybersecurity defenders early access to advanced AI models before attackers can use them offensively. The program offers two tiers: Daybreak Blue provides GPT-5.6 Sol (a general-purpose AI model) with modified safeguards for defensive security work like finding vulnerabilities and analyzing malware, while Daybreak Red offers GPT-5.6-Cyber, a specialized model trained to better assist with advanced security tasks like exploit development (creating attack code chains) with fewer refusals to help requests.

Transformers, the neural network architecture (a type of AI model structure) that powers modern large language models, are becoming a bottleneck because they require massive amounts of computation to process text, especially when handling large amounts of input data simultaneously. Researchers and startups are exploring new approaches to replace or improve transformers, with one promising direction being sparse attention, which reduces computational load by only comparing some word pairs instead of all pairs.

AI is transforming the cybersecurity market, with record venture capital funding flowing into AI-focused security startups and established vendors buying up new companies to add AI features to their platforms. New product categories have emerged specifically to protect AI systems, including prompt injection detection (catching attacks that hide malicious instructions in AI inputs), LLM security (protecting large language models), and AI red teaming (simulating attacks to find vulnerabilities). Major cybersecurity companies like CrowdStrike, Cisco, and Check Point are aggressively acquiring AI security startups to fill gaps in their security offerings.

A vulnerability in Keras (a machine learning library) versions 3.15.0 and earlier allows attackers to crash applications by creating malicious .keras model files. When the keras.models.load_model() function opens these files, it doesn't check how much memory the data needs, causing the program to run out of memory (OOM, an out-of-memory condition where the system can't allocate more space) and crash. This risk affects machine learning pipelines that load models from untrusted sources like public repositories.

OpenAI has paused internal work on its Astra AI model after discovering it has strong capabilities in agentic coding (where AI can act autonomously to write and modify code) and cybersecurity tasks, including potentially developing zero-day exploits (previously unknown software vulnerabilities that attackers could use). In response, the company is implementing security controls like isolated testing environments, restricted network access, enhanced encryption, and continuous monitoring to detect risky behavior before deploying the model more widely.

A security researcher using OpenClaw (an AI tool running Opus 4.6) discovered a critical vulnerability in an Australian gym-booking website where the API (application programming interface, the system that lets software communicate) lacks authorization checks (verification that a user is allowed to perform an action) on canceling reservations, allowing anyone to cancel other users' bookings and manipulate their waitlist positions.

A security researcher using OpenClaw (an AI system running Opus 4.6) discovered that a gym-booking website had a critical authorization flaw: the API lacked permission checks when canceling reservations, allowing anyone to cancel other users' bookings without proper authentication (verification of who you are). The researcher demonstrated this by canceling another person's reservation from the waitlist.

OpenAI is introducing Premium seats for ChatGPT Business, which offer 5x more usage capacity than Standard seats and remove the five-hour usage limit, allowing power users to work on larger projects without interruption. Premium seats cost $125/month per user (or $100/month annually), while Standard seats remain at $25/month ($20/month annually), and teams can mix both types in the same workspace. For a limited time, eligible early adopters can receive $100 in workspace credits for each Premium seat added, up to $500 total.