Cyber, a specialized AI for approved security defenders. The model achieves 95% task completion and found real Chrome vulnerabilities.

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

OpenAI says the model has already helped identify vulnerabilities across Chrome’s V8 engine, databases, mobile operating ...

BdThemes supply chain attack poisons JSON feed to create rogue WordPress admins and deploy web shells without code changes.

OpenAI has expanded its Daybreak cybersecurity initiative with GPT-5.6-Cyber, a specialised model designed for authorised vulnerability research and security testing. The company said it completed 95 ...

OpenAI’s documents list pricing for GPT-5.6-Cyber at $12.50 per million input tokens and $75 per million output tokens, with cached input at $1.25 per million tokens.

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

Patrons and digital privacy groups pushed back against the bars' use of Patronscan Guard+. But some bars may be sticking with ...

Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...

SMOKE#SCREEN uses fake Adobe and Zoom updates, document lures, and trusted cloud services to install ScreenConnect for persistent remote access.

Unexplained CPU spikes, overheating fans, and battery drain may indicate cryptojacking malware is secretly mining ...