AICoder

AI Coding Live News

First-hand AI coding updates from 𝕏/Twitter frontier labs and researchers, distilled by AI with entity benchmarks.

Explore live on 𝕏 ↗

AI Coding Live News

S
Sean Heelanseanhn·
👀33
🔥81
View on 𝕏 ↗

OpenAI says Daybreak Blue sessions on personal accounts may be used for training even with the training toggle off, drawing security researcher backlash on X

OpenAI's "Data controls in ChatGPT" Help Center page now has a "Trusted Access on personal accounts" section: during sessions in Trusted Access programs such as Daybreak Blue, OpenAI may use interaction content to improve its models even when "Improve the model for everyone" is off, to strengthen safeguards against cyber misuse, while other activity still follows the user's setting. Emails that several users shared on X say the change takes effect November 29, and researchers including Sean Heelan criticized it for pulling unreported vulnerabilities and research into training data.

Key Takeaways

  • Official wording: Trusted Access sessions such as Daybreak Blue on personal accounts may be used to improve models regardless of the "Improve the model for everyone" toggle
  • The exception covers only Trusted Access sessions; other chats on the account still follow the existing setting
  • Managed workspaces such as Business and Enterprise, and the API, are still not used for training by default
  • Emails users shared on X say it takes effect November 29, and some users say individuals lose Daybreak Blue API access on November 20 (the official pages do not state either date yet)
  • Sean Heelan's critical post drew 600+ likes and 100+ reposts, and several bug bounty hunters said they would reconsider using the program
Read full story
Linked Models & Agents:
⚡ GPT-6 Astra🤖 Codex🤖 ChatGPT🌐 OpenAI
#OpenAI#Daybreak#Trusted Access#data privacy#model training#Cybersecurity
A
Amazon Web Services@awscloud·
👀11
🔥80

OpenAI Daybreak Red (GPT-5.6 Cyber) arrives on Amazon Bedrock in AWS GovCloud (US-East) for vetted defenders, at $16.875 input and $101.25 output per 1M tokens

On Oct 30, AWS announced that Daybreak Red (GPT-5.6 Cyber, model ID openai.gpt-5.6-cyber), the OpenAI security model built for vulnerability research, is now on Amazon Bedrock in AWS GovCloud (US-East), after previously being offered only in US East (Ohio). Access still requires passing OpenAI Daybreak eligibility. GovCloud short-context pricing is $16.875 input and $101.25 output per 1M tokens, about 23% above Ohio at $13.75 and $82.50.

Key Takeaways

  • Regions: Daybreak Red can now be called In-Region in us-east-2 (Ohio) and us-gov-east-1 (GovCloud US-East); Geo and Global cross-Region inference are not supported (AWS announcement)
  • Eligibility: customers must first enroll in OpenAI Daybreak / Trusted Access for Cyber, then have their AWS account team enable access
  • Pricing: GovCloud short context (272K input tokens or fewer) is $16.875 input, $21.09375 for 30-minute cache writes, $1.6875 cache reads and $101.25 output per 1M tokens
  • Data: AWS says inference data is not used for training and Daybreak Red data does not need to be shared with OpenAI; it runs on an inference engine with zero-operator access enforced at the chip
  • API: served through the bedrock-mantle endpoint with OpenAI Responses and Chat Completions, and a 1,050,000-token context window
Read full story
Linked Models & Agents:
⚡ GPT-5.6 Cyber🌐 OpenAI🌐 Amazon Bedrock🌐 AWS
#OpenAI#Daybreak#Daybreak Red#GPT-5.6 Cyber#Amazon Bedrock#GovCloud#Security#Pricing
O
OpenAI@OpenAI·
👀73
🔥98
View on 𝕏 ↗

OpenAI Discloses PHP Zero-Day Critical Flaws Found via GPT-5.6 Sol, Open-Sources Scanner and Pledges $1B Defense Fund

OpenAI announced a critical coordinated vulnerability disclosure in the core PHP runtime discovered by cybersecurity firm Calif utilizing GPT-5.6 Sol, alongside independent verification by Wiz. Because PHP powers roughly 70% of all websites globally, the vulnerability represented an existential risk to internet infrastructure. Following coordinated patching, OpenAI committed $1B in subsidized Daybreak security access and open-sourced openai/php2shell-checker, an automated Codex inspection tool enabling site administrators worldwide to audit their deployments.

OpenAI Discloses PHP Zero-Day Critical Flaws Found via GPT-5.6 Sol, Open-Sources Scanner and Pledges $1B Defense Fund

Key Takeaways

  • Cybersecurity firm Calif used GPT-5.6 Sol to identify critical remote code execution (RCE) vulnerabilities in the core PHP interpreter
  • PHP powers an estimated 70% of active web properties globally; patches have been coordinated and safely distributed
  • OpenAI commits $1 billion in subsidized Daybreak program access to support security research across foundational open-source projects
  • Open-sources openai/php2shell-checker on GitHub, providing an automated Codex-powered scanner for site vulnerability assessments
Read full story
Linked Models & Agents:
⚡ GPT-5.6 Sol⚡ Codex🤖 php2shell-checker🌐 OpenAI🌐 Calif🌐 Wiz
#OpenAI#PHP#Security#Vulnerability#GPT-5.6#Cybersecurity#Daybreak
O
OpenAIOpenAI·
👀65
🔥90
View on 𝕏 ↗

OpenAI Patch the Planet: GPT-5.6 Sol helped find two critical PHP RCE flaws, fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35

On Oct 21, PHP published a security advisory fixing two critical unauthenticated remote code execution flaws (CVE-2026-109618, CVE-2026-109619) affecting every PHP install serving web requests, with mod_php at highest risk. OpenAI disclosed the same day that Calif found a flaw using GPT-5.6 Sol under its Patch the Planet initiative, with Wiz independently finding and reporting both; OpenAI coordinated a two-month disclosure and committed $1B in subsidized Daybreak access for under-resourced defenders.

OpenAI Patch the Planet: GPT-5.6 Sol helped find two critical PHP RCE flaws, fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35

Key Takeaways

  • Flaws: CVE-2026-109618 (memory corruption via OOM handling) and CVE-2026-109619 (stale global state across requests), both unauthenticated RCE (PHP official)
  • Fix: upgrade to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35; PHP says there are no complete mitigations and updating is the only safe choice
  • Scope: PHP-FPM, Apache mod_php, php-cgi, FrankenPHP and LiteSpeed are affected, with a demonstrated exploit on mod_php
  • AI role: Calif found a flaw with GPT-5.6 Sol, Wiz reported both independently; OpenAI coordinated a ~2-month disclosure (vendor account)
  • Investment: OpenAI committed $1B in subsidized Daybreak access and will ship a Codex skill to check PHP versions
Read full story
Linked Models & Agents:
⚡ GPT-5.6 Sol🤖 codex🤖 daybreak🌐 OpenAI🌐 PHP🌐 Calif🌐 Wiz🌐 Cloudflare
#Security#PHP#CVE#RCE#Patch-the-Planet#AI-vulnerability-discovery#Codex
ADSponsored
O
OpenAI@OpenAI·
👀69
🔥93

OpenAI Python SDK 3.20.0: Agents credential/session options, Cyber access programs on Responses, opt-in WebSocket text/tool snapshots

OpenAI shipped Python SDK v3.20.0 on 2026-09-28: Agents credentials gain metadata and update-without-replace auth, sessions add ultrafast tier plus misalignment_policy_violation; Responses can select Cyber access programs (standard/daybreak_blue/daybreak_red); and an opt-in ResponsesWebSocketAccumulator yields immutable incremental text/tool snapshots. Live/Realtime WebSocket query/queue/TLS retry fixes land in the same cut.

OpenAI Python SDK 3.20.0: Agents credential/session options, Cyber access programs on Responses, opt-in WebSocket text/tool snapshots

Key Takeaways

  • Shipped v3.20.0 — Agents credential metadata/session ultrafast + Cyber access programs
  • Opt-in ResponsesWebSocketAccumulator for incremental text/tool snapshots (190+ WS tests)
  • Live/Realtime WebSocket query/queue/TLS retry hardening
  • Upgrade: pip install -U openai
Read full story
Linked Models & Agents:
⚡ GPT-6 Sol⚡ GPT-6 Luna🤖 OpenAI-Agents🌐 OpenAI
#OpenAI#Python SDK#Agents#Responses API#WebSocket#Cyber#Realtime
O
OpenAI@OpenAI·
👀41
🔥94
View on 𝕏 ↗

OpenAI Launches $1 Billion 'Daybreak' Initiative for Critical Infrastructure Defense

OpenAI unveiled a $1 billion initiative called 'Daybreak for Frontline Defenders' to provide subsidized frontier AI defensive tooling and expert technical assistance for water utilities, electric power grids, and critical medical systems.

Key Takeaways

  • $1 billion program subsidizing frontier defensive AI for vital municipal and grid infrastructure
  • Provides verified operators with specialized defensive auditing tools powered by GPT-6 Astra
  • Committed an additional $5 million to fund independent research on generative AI effects on teens
Read full story
Linked Models & Agents:
⚡ GPT-6 Astra🌐 OpenAI
#OpenAI#Daybreak#Cybersecurity#Critical Infrastructure#GPT-6
O
OpenAI@OpenAI·
👀45
🔥96
View on 𝕏 ↗

OpenAI: Astra hits Critical cyber threshold; release with stronger safeguards

OpenAI said upcoming Astra is the first model it designates at the Critical cybersecurity capability threshold under its Preparedness Framework, beating GPT-5.6 Sol on exploit benchmarks and even discovering zero-days in evals. It delayed parts of training/release, hardened refusals, classifiers, and chain-of-thought monitoring; advanced cyber access will start with limited testers and Daybreak Blue.

Key Takeaways

  • Astra is OpenAI's first Critical cybersecurity designation under the Preparedness Framework.
  • Perfect ExploitBench score; far stronger than GPT-5.6 Sol on an internal high-severity V8 set, including two zero-days.
  • Hardened refusals (~91.5% jailbreak refusal), classifiers, and CoT monitoring; advanced cyber access starts limited.
Read full story
Linked Models & Agents:
⚡ GPT-5.6 Sol🌐 OpenAI
#Astra#Preparedness Framework#Critical cyber#ExploitBench#Daybreak Blue#Agentic coding#OpenAI
You've caught up with all stories