OpenAI GPT-6 Cyber: AI model finds 81 Firefox flaws and 948 Linux kernel vulnerabilities with working exploits

Key facts for GPT-6 Cyber model

Detection coverage for GPT-6 Cyber model

As of 2026-11-06, Threadlinqs Intelligence publishes 9 detection rule(s) for TL-2026-5406 across Splunk SPL, Microsoft KQL and Sigma, covering 11 indicator(s) of compromise. The whole corpus is readable without an account. Every threat comes with one complete detection in Splunk SPL, Microsoft KQL and Sigma, free for everyone; a free account adds daily TL Creds to unlock the rest. Paid plans add a larger daily allowance, correlation and the MCP server. Threadlinqs MCP server · View plans.

Free detection: Mozilla Firefox Process Spawning Shell or Script Interpreter (AI-Discovered Firefox Flaw Exploitation)

Detects Firefox (or its plugin-container helpers) spawning a command shell, script host or download utility on Windows or Linux. A successful browser memory-corruption exploit (T1203) normally ends with the compromised renderer launching a payload stage. TL-2026-5406 reports 81 previously unknown high-severity Firefox flaws found by OpenAI GPT-6 Cyber and a shrinking discovery-to-exploit window; no in-the-wild exploitation is reported, so this is behavioural monitoring for post-exploit child-process behaviour, not a signature.

• Languages: Splunk SPL, Microsoft KQL, Sigma
• ATT&CK: T1203, T1059.001, T1059.004
• Data sources: sysmon, sysmon_for_linux, edr_process_telemetry
• Severity: high
• Confidence: medium

Splunk SPL

index=sysmon (sourcetype="XmlWinEventLog:Microsoft-Windows-Sysmon/Operational" OR sourcetype="sysmon:linux") EventCode=1
| eval parent=lower(ParentImage), child=lower(Image)
| where match(parent,"(\\|/)(firefox|firefox-bin|plugin-container)(\.exe)?$")
| where match(child,"(\\|/)(cmd|powershell|pwsh|wscript|cscript|mshta|rundll32|regsvr32|bash|sh|dash|zsh|python[0-9.]*|perl|curl|wget|nc|ncat)(\.exe)?$")
| stats count min(_time) as firstTime max(_time) as lastTime values(CommandLine) as child_commands by host User ParentImage Image
| convert ctime(firstTime) ctime(lastTime)

Microsoft KQL

DeviceProcessEvents
| where Timestamp > ago(24h)
| where InitiatingProcessFileName in~ ("firefox.exe", "firefox", "firefox-bin", "plugin-container.exe", "plugin-container")
| where FileName in~ ("cmd.exe", "powershell.exe", "pwsh.exe", "wscript.exe", "cscript.exe", "mshta.exe", "rundll32.exe", "regsvr32.exe", "bash", "sh", "dash", "zsh", "python", "python3", "perl", "curl", "wget", "nc", "ncat")
| project Timestamp, DeviceName, AccountName, InitiatingProcessFileName, InitiatingProcessCommandLine, FileName, ProcessCommandLine

Sigma

title: Firefox Spawning Shell or Script Interpreter
id: 3f6a1c52-8b4e-4d27-9a31-5c7e2d90b1a4
status: experimental
description: Detects Firefox or its helper processes launching a shell, script host or download utility, consistent with post-exploitation of a browser memory-corruption flaw (TL-2026-5406 AI-discovered Firefox vulnerabilities).
references:
    - https://www.helpnetsecurity.com/2026/11/06/openai-gpt-6-cyber-released/
author: AII-Detector — ThreadLinqs Intelligence
date: 2026-11-06
tags:
    - attack.execution
    - attack.t1203
    - attack.t1059.001
    - attack.t1059.004
logsource:
    category: process_creation
detection:
    selection_parent:
        ParentImage|endswith:
            - '/firefox'
            - '/firefox-bin'
            - '/plugin-container'
            - '\firefox.exe'
            - '\plugin-container.exe'
    selection_child:
        Image|endswith:
            - '\cmd.exe'
            - '\powershell.exe'
            - '\pwsh.exe'
            - '\wscript.exe'
            - '\cscript.exe'
            - '\mshta.exe'
            - '\rundll32.exe'
            - '\regsvr32.exe'
            - '/bash'
            - '/sh'
            - '/dash'
            - '/zsh'
            - '/python3'
            - '/perl'
            - '/curl'
            - '/wget'
            - '/nc'
            - '/ncat'
    condition: selection_parent and selection_child
falsepositives:
    - Browser helper applications or external-protocol handlers configured by the organisation
    - Developer or IT testing of Firefox native-messaging hosts
level: high

Known false positives:

• Enterprise Firefox policies launching helper apps (e.g. external protocol handlers) that start cmd.exe or sh
• Native-messaging hosts for password managers or SSO tools implemented as scripts

Tuning notes: Allowlist known native-messaging host command lines and approved protocol handlers via ParentCommandLine/CommandLine. Remove curl/wget/python from the child list on developer workstations if noisy. Raise priority when the child launches from a user profile or temp directory.

• 🔒 Node.js, Bun or Envoy Runtime Spawning Shell or Downloader ([indicator] RCE Exploitation) · unlock with TL Creds
• 🔒 Exploit Source Compiled in World-Writable Directory on Linux Host (Kernel Exploit Staging) · unlock with TL Creds
• 🔒 OpenAI Codex CLI Agent Executed on Endpoint or Server · unlock with TL Creds
• 🔒 Vulnerability Scanner User-Agents Against Web Servers (Automated Active Scanning) · unlock with TL Creds
• 🔒 Exploit Code Download or Exploit Framework Execution on Linux Host · unlock with TL Creds
• 🔒 Setuid Bit Set on File in World-Writable Directory (Post-Exploitation Privilege Persistence) · unlock with TL Creds
• 🔒 Linux Unprivileged Parent Spawning Root Process Outside Known Privilege Brokers (Kernel LPE) · unlock with TL Creds
• 🔒 Web Traffic to OpenAI API and ChatGPT Endpoints From Servers or OT Segments (AI Capability Use) · unlock with TL Creds

Indicators of compromise for GPT-6 Cyber model

As of 2026-11-06, Threadlinqs Intelligence tracks 11 indicators of compromise for TL-2026-5406.

How GPT-6 Cyber model works

Access is limited to approved Daybreak Red customers.

On 2026-11-06 Help Net Security reported the release of OpenAI's GPT-6 Cyber, a specialized version of GPT-6 Astra trained for vulnerability discovery, exploit validation and fix development. According to the article, the model found 81 previously unknown Firefox vulnerabilities that Mozilla rated high severity, and 948 Linux kernel vulnerabilities for which working exploits were produced. In testing with Dragos on a mock power plant it reportedly identified two zero-days in engineering software, and a critical Brotli vulnerability that allows remote code execution was found while testing OpenAI's safety measures. On the ExploitGym benchmark GPT-6 Cyber scored 48.5% versus 32.1% for the predecessor GPT-5.6 Cyber.

No CVE identifiers, threat actors, IOCs or in-the-wild exploitation are stated for the GPT-6 Cyber findings; the article is the single source for these figures, and vendor-side details (affected Linux kernel versions, Firefox release, engineering software vendors) were not published in the material reviewed. The significance is the capability: automated, large-scale vulnerability discovery combined with working exploit generation compresses the window between bug discovery and weaponization, and the same capability class would be dual-use if it were obtained by an attacker.

OpenAI classifies the model as Critical in cybersecurity under its Preparedness Framework. This is a vendor capability classification, not a CVSS or exploitation severity. Access is initially through the API and Codex for selected, approved Daybreak Red customers, with planned extension to all program participants. Reported safeguards include monitoring for unauthorized actions, targeted threat detection, private safety processing, stolen-credential protections, blocking of high-risk cyber assistance, sandboxing and human oversight. On the ExploitGym Honeypot test the model reportedly avoided out-of-scope exploitation 99.93% of the time without safety instructions and 100% with them.

Context from earlier coverage: Daybreak Red launched around 2026-08-10 with GPT-5.6-Cyber, the first OpenAI model assessed at the High cyber threshold, which OpenAI said found two chainable Chrome V8 flaws (memory corruption plus heap sandbox escape, reported as CVE-2026-15903) that Google patched. This item is tracked for monitoring, not as an actively exploited vulnerability.

MITRE ATT&CK techniques by tactic:

Execution

T1203 Exploitation for Client Execution

Resource Development

T1587.004 Exploits; T1588.006 Vulnerabilities; T1588.007 Artificial Intelligence

Reconnaissance

T1595.002 Vulnerability Scanning

Remediation for GPT-6 Cyber model

Patches

• Apply vendor updates as Mozilla, Linux kernel maintainers, Brotli maintainers and engineering-software vendors publish fixes

Immediate actions

• Track Mozilla Firefox and Linux kernel security advisories for fixes tied to AI-assisted disclosures and patch promptly
• Review patch SLAs for kernel and browser updates given the shorter discovery-to-exploit window implied by AI-assisted exploit development

Workarounds

• Restrict exposure of ICS engineering workstations and segment OT networks pending vendor fixes

Longer-term hardening

• Increase use of AI-assisted vulnerability discovery and fix validation in your own secure development lifecycle
• Invest in exploit-mitigation hardening and behavioral EDR detection rather than relying on patch-gap time
• Maintain asset inventory for Linux kernel versions, browsers and ICS engineering software to speed exposure assessment

Affected and fixed versions

• Mozilla — Firefox
  Vulnerable versions: Not stated in source
  Fixed in: Not stated in source
• Linux kernel community — Linux kernel
  Vulnerable versions: Not stated in source
  Fixed in: Not stated in source
• Brotli project — Brotli compression library
  Vulnerable versions: Not stated in source
  Fixed in: Not stated in source

Timeline of GPT-6 Cyber model

• 2026-08-10 locked-ioc-8 launches locked-ioc-2 with locked-ioc-1, its first model assessed at the High cyber capability threshold under the Preparedness Framework.
• 2026-08-11 Help Net Security reports locked-ioc-1 found two chainable Chrome V8 flaws (CVE-2026-15903) and was available only via vetted locked-ioc-2 access.
• 2026-09-01 Hardware security keys become mandatory for all locked-ioc-6 accounts (per AI Weekly).
• 2026-11-06 locked-ioc-5 score 48.5% versus 32.1% for GPT-5.6 Cyber; access limited to approved locked-ioc-2 customers via API and locked-ioc-11, with planned extension to all program participants.
• 2026-11-06 Reported results: 81 new high-severity Firefox vulnerabilities (per locked-ioc-7), 948 Linux kernel vulnerabilities with working exploits, and two zero-days in engineering software found during locked-ioc-9 testing on a mock power plant.
• 2026-11-06 Help Net Security reports locked-ioc-3, a locked-ioc-4 variant, classified Critical in cybersecurity under locked-ioc-8's Preparedness Framework.

Sources cited for GPT-6 Cyber model

• OpenAI: Expanding Daybreak as the cyber defense window narrows openai.com · Vendor report
• Firefox zero day: Mozilla says Claude Mythos found 271 bugs dev.to · Blog
• OpenAI's GPT-6 Cyber found 81 Firefox flaws earlier AI testing missed Help Net Security · News · 2026-11-06
• GPT-5.6-Cyber refuses security researchers' requests far less often Help Net Security · News · 2026-08-11
• OpenAI Launches Daybreak Red With GPT-5.6-Cyber, First Model to Hit 'High' Cyber Threshold aiweekly.co · News · 2026-08-10
• Can OpenAI's New Daybreak Tools Stop Cyber Threats? technologymagazine.com · News
• Firefox Maker Mozilla Says AI Could End the Era of Zero-Day Vulnerabilities hothardware.com · News

More in threat intel

• Top 10 Critical Threat Actors to Watch in 2026: Akira, DragonForce, Qilin, LockBit, Scattered Spider, Cl0p, Lazarus, Volt Typhoon, APT29, OilRig (CVE-2024-40766, CVE-2025-61882, CVE-2023-34362, CVE-2024-39717, CVE-2024-30088)
• ARTEX agentic AI offensive framework abuse expands as Storm-3358 targets financial sector
• Brute Force Attacks Against Internet-Exposed RDP/RD Gateway/RDWeb, SSH and macOS Logins (Huntress Brute Force Sentry)
• OpenAI GPT-6 Cyber AI Model Finds 81 Firefox Flaws and Develops Root Exploits for 948 Linux Kernel Flaws
• France Cyber Threat Outlook: Dark Web Credential Trade, Ransomware (Qilin/MedusaLocker/LockBit) and NoName057(16) Hacktivism

Previous and next in threat intel

• Threat actors use agentic AI tooling (ARTEX) to find and abuse exposed secrets in GitHub and Azure Previous report
• OpenAI rates GPT-6 Cyber 'Critical' cyber risk after large-scale vulnerability discovery and exploit development Next report