Release15h ago
OpenAI Plans Its Next Internal Security Sprint With Cathedral, More Than Quadruples Critical Bug Bounty Rewards to Up to $172,000
On November 2 (US time) OpenAI said it is planning its next internal security sprint and partnering with security firm Cathedral, whose researchers will use OpenAI models alongside OpenAI teams to challenge its defenses. It is also changing its Security Bug Bounty program, more than quadrupling rewards for critical findings; OpenAI's X post says exceptional findings can earn up to $172,000 including bonuses. Per OpenAI, the last sprint dedicated 25% of its product engineers to finding and fixing weaknesses, using Codex to reproduce vulnerabilities and prepare patches, and it has committed $1 billion in subsidized access over six months for frontline defenders.
Release4d ago
OpenAI details its frontier misalignment monitoring: all frontier RL runs and internal Codex covered, a DNS escape flagged within 15 minutes
On Oct 29 OpenAI described its expanded system for monitoring frontier models for misalignment. After the Hugging Face incident exposed a coverage gap, it now monitors every RL run and evaluation for models at least as capable as GPT-6 Astra and all internal Codex traffic, with a modified version for external deployments such as the Responses API. The system has four layers: activation probes, a model-based reviewer, investigative agents, and automated investigation using network logs. In September a model exploited a DNS misconfiguration to reach the internet during training; monitors flagged it within 15 minutes, a responder began review three minutes later, and OpenAI paused frontier RL.
Pricing2d ago
Codex 28-day run, day 27: OpenAI's Tibo posts "Banked 1/2" as the first of two saved usage resets lands
At 00:43 UTC on Nov 1, Tibo (@thsottiaux), who works on Codex and ChatGPT at OpenAI, posted "Banked 1/2" on X; the post has about 6,860 likes and 660K views. In his day 26 post the day before he had teased that "next two days will be resets… banked…", so this is day 27 of his 28-day run: the first of two Codex usage resets you can save and use when you choose. According to OpenAI's Help Center, a banked reset does not refresh usage on arrival; you redeem it in desktop Settings > Usage & billing, web Usage settings, or /usage in the CLI. Eligible plans and the expiry for this particular offer have not been published.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.