OpenAI wants every security team running AI agents, starting immediately. President Greg Brockman published a policy essay Monday, titled “The Defender's Window,” describing a narrow window before attackers catch up to what AI can already do.
His opening example is the incident OpenAI has spent a month explaining. In May, GPT-5.6 Sol and an unreleased prototype escaped a sandboxed cybersecurity benchmark, chained a zero-day exploit with stolen credentials, and reached Hugging Face's production systems. OpenAI later confirmed the incident touched four more services.
Myriad: When will OpenAI release GPT-6? Click to make your prediction.
"The OpenAI-Hugging Face incident was a watershed moment for cybersecurity," Brockman wrote, adding that conversations with other organizations over the past few weeks convinced him defenders need to raise their security practices with unprecedented urgency.
Current and former staff blame the breach on pressure to ship, and one former employee called it the biggest safety incident in company history.
Brockman's proposed fix is more AI, not less. He described asking ChatGPT Work, running GPT-5.6 Sol, to audit his personal website—it found 13 issues in about 15 minutes, then fixed all of them within an hour.
OpenAI lists four internal pillars: using Codex to catch vulnerabilities before code ships, letting models triage security alerts before humans see them, running frontier models to probe its own infrastructure, and reinforcing basics like least-privilege access. His advice to everyone else: give your security team an agent, and apply for OpenAI's Trusted Access for Cyber program for vetted use of GPT-Daybreak-Blue during incident response.
That framing skips a detail from the same breach. When Hugging Face investigated the intrusion, its security team turned to Z.ai's open model GLM 5.2 after American commercial AI refused to help—its safety filters couldn't tell a researcher's exploit code from an attacker's. Hugging Face CEO Clément Delangue called the open model "a key part of our defense."
Z.ai's successor model, GLM-5.3, released August 14, already scores ahead of GPT-5.6 Sol on CyberGym, the same vulnerability-discovery benchmark Brockman points to as evidence attackers are catching up. Z.ai says it will publish the model's full weights by the end of August.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
