The defender's window is open now.

Today, almost all of our initial security alerts are triaged by intelligence before humans are looped in. This helps reduce toil for defenders, improves response time, and lets humans spend time where their skills are most leveraged—in discernment, judgement, and applied expertise.

an agentic collective was able to autonomously penetrate not just OpenAI research infrastructure but also the production infrastructure of another company, chaining together vulnerabilities ranging from previously-unknown security flaws to using credentials to user accounts that had been leaked onto the internet

AI models developed around the world are increasingly able to automate parts of real-world cyberattacks, making longstanding security gaps—from bugs buried deep in human-written software to forgotten permissions—easier to find and exploit.

We now require stronger evidence of aligned behavior throughout all of training

Our current estimates put monitoring overhead at roughly 20% of the inference compute being monitored

we temporarily slowed the pace of scaling

The vulnerability was live for only five days before an automated agent discovered and validated it

Copilot was a co-author that checked the merged PR and code change, and identified it as all-clear without noticing the critical vulnerabilities

Critical vulnerabilities can still be introduced and approved within workflows involving AI coding agents

All the researchers TechCrunch spoke to said they live outside of the U.S. and Europe, suggesting the revocations may be limited to certain regions

The idea behind TAC and CVP is to give trusted defenders better models so they can report bugs and vulnerabilities to companies