OpenAI Launches GPT-5.6, Requires Hardware Security Keys for Privileged Access

Artificial intelligence models are moving beyond code review into exploit development, raising the stakes for both defenders and would-be attackers. OpenAI’s Daybreak program seeks to manage that dual-use risk through two access tiers. Daybreak Blue gives approved defenders GPT-5.6 Sol with safeguards tailored to authorized defensive work, while Daybreak Red reserves purpose-trained cyber models for advanced vulnerability research, exploit validation, penetration testing and red teaming under tighter verification and oversight.

OpenAI on Aug. 10, 2026, introduced GPT-5.6-Cyber through Daybreak Red. The model completed 95.0% of requests in an internal advanced cybersecurity test covering exploit chains, authentication bypass and privilege escalation, compared with 57.3% for GPT-5.5-Cyber. Researchers also used it to uncover two previously unknown flaws in Chrome’s V8 engine that could be chained to corrupt memory and escape the heap sandbox. Google fixed one as CVE-2026-15903, while the second remains under coordinated disclosure.

OpenAI launched Trusted Access for Cyber (TAC) on February 5, 2026, and pledged $10 million in API credits through its Cybersecurity Grant Program. Because frontier models can both identify vulnerabilities and enable attacks, TAC provides tiered access based on identity and trust verification, aiming to give defenders priority access to its capabilities while reducing the risk of misuse.

OpenAI launched GPT-5.4-Cyber on April 14, expanding TAC to thousands of verified defenders and hundreds of teams safeguarding critical software. The highest tier provides access to the model, which lowers refusal thresholds for legitimate cybersecurity work and supports binary reverse engineering. On April 21, the company demonstrated it to about 50 U.S. federal cybersecurity personnel in Washington and began outreach to the Five Eyes alliance.