cyber.hendryadrian.com
Security News · thehackernews.com

OpenAI Expands GPT-5.5-Cyber and Launches Open-Source Security Initiative

· Original article ↗

Summary

OpenAI says its updated GPT-5.5-Cyber model and Codex Security plugin will help trusted defenders find, validate and patch vulnerabilities; its Patch the Planet initiative with Trail of Bits will support open-source projects amid concerns AI is accelerating exploitation

Key points

  • OpenAI says GPT-5.5-Cyber can analyze large codebases, identify and validate security issues, and help develop and test patches.
  • The updated Codex Security plugin is designed to scan code, triage existing findings, trace attack paths, and generate reports and patches for review.
  • Patch the Planet, a new initiative with Trail of Bits, will help open-source projects review findings, develop patches and tests, and build reusable discovery workflows.
  • OpenAI says its Daybreak initiative has surfaced vulnerabilities across operating systems and browsers, including Linux, OpenBSD, FreeBSD, dnsmasq, Chrome, Safari, and Firefox.
  • The article cites Squidbleed (CVE-2026-47729), a flaw that can expose other users' cleartext HTTP requests under certain conditions.
  • The article reports warnings from cybersecurity agencies that AI may increase the speed and scale of exploitation, shortening defenders' response time.

Article Details

Event Type
OpenAI released an improved GPT-5.5-Cyber model and updated Codex Security plugin, and launched the Patch the Planet initiative with Trail of Bits.
Impact
The model and plugin are intended to help defenders find, validate, and patch vulnerabilities across codebases, including open-source projects. The article warns that AI is also accelerating vulnerability exploitation and shrinking defenders’ response time. It cites CVE-2026-47729 (Squidbleed), which can leak other users’ cleartext HTTP requests under certain conditions.

CVE

CVE-2026-47729Squid-cache · SquidCase in point is a 29-year-old flaw in the Squid web proxy (CVE-2026-47729, aka Squidbleed) that can leak cleartext HTTP requests belonging to other users under certain conditions.

Vendors

OpenAIOpenAI has released an improved GPT‑5.5‑Cyber model and updated Codex Security plugin to help trusted defenders find, validate, and patch vulnerabilities faster across large codebases.Trail of BitsThe company also launched the Patch the Planet initiative with Trail of Bits to support open-source projects and address the growing security burden created by AI-driven vulnerability discovery and exploitation.

Products

Codex SecurityOpenAI has released an improved GPT‑5.5‑Cyber model and updated Codex Security plugin to help trusted defenders find, validate, and patch vulnerabilities faster across large codebases.SquidCase in point is a 29-year-old flaw in the Squid web proxy (CVE-2026-47729, aka Squidbleed) that can leak cleartext HTTP requests belonging to other users under certain conditions.

Related Articles