Cyber Security News

OpenAI Launches GPT-5.6 Sol AI Model With Advanced Cyber Capabilities And Layered Safeguards

OpenAI has announced the limited preview of its next-generation AI model family, GPT‑5.6, headlined by the flagship “Sol” model, which introduces significant advancements in cybersecurity capabilities alongside a newly engineered layered safeguard architecture.

The release, disclosed on June 26, 2026, positions GPT‑5.6 Sol as the company’s most capable model to date, with measurable improvements across vulnerability research, exploit analysis, and defensive security workflows, while simultaneously implementing stricter controls to mitigate misuse.

OpenAI Launches GPT-5.6 Sol AI Model

The launch also includes two additional variants, Terra, optimised for balanced performance and cost efficiency, and Luna, a lightweight model designed for speed and affordability, forming a tiered ecosystem tailored for enterprise, developer, and security use cases.

From a cybersecurity perspective, GPT‑5.6 Sol demonstrates notable gains in long-horizon reasoning tasks such as vulnerability discovery and exploit chain analysis.

According to OpenAI, the model performs competitively on ExploitBench while consuming approximately one-third fewer output tokens compared to rival systems, indicating improved efficiency in complex exploit simulations.

Additionally, in ExploitGym evaluations conducted in collaboration with UC Berkeley, all GPT‑5.6 variants showed measurable improvements in identifying exploitation pathways as reasoning depth increased.

highlighting improved agentic capabilities (Source: OpenAI)

OpenAI emphasized that while the model can identify critical vulnerabilities and exploitation primitives in software such as Chromium and Firefox, it does not autonomously generate complete end-to-end exploit chains under controlled conditions, placing it below the “Cyber Critical” threshold defined in its Preparedness Framework.

A key highlight of the release is the introduction of a “layered safeguard stack” to address growing concerns about AI-assisted offensive cyber operations.

These safeguards include model-level restrictions that prevent prohibited cyber assistance, real-time output monitoring using misuse classifiers, and account-level behavioral analysis to detect patterns of malicious activity.

For high-risk interactions, outputs may be paused and reviewed by a secondary reasoning system before delivery, effectively serving as a runtime security filter.

This multi-layered approach is intended to make malicious use more difficult to execute, detectable, and resource-intensive, while preserving legitimate applications such as penetration testing, patch development, and secure code auditing.

OpenAI also disclosed extensive investment in automated red-teaming to strengthen model resilience against adversarial attacks. The company utilized over 700,000 A100-equivalent GPU hours to simulate jailbreak attempts and identify systemic weaknesses across diverse attack scenarios.

This was complemented by human expert red-teaming to uncover nuanced abuse techniques that automated systems may overlook. The findings from these exercises were used to refine safeguards and establish a rapid-response remediation pipeline for newly discovered vulnerabilities in model behavior.

The GPT‑5.6 series introduces enhanced reasoning modes, including a “max reasoning” setting for deep analytical tasks and an “ultra mode” that leverages multiple subagents to handle complex workflows such as multi-stage vulnerability assessments.

In coding benchmarks like Terminal-Bench 2.1, GPT‑5.6 Sol achieved a leading score of 91.9%, outperforming previous-generation models and competing systems in command-line and tool-coordination tasks relevant to security operations.

The models are currently available via API and Codex to a limited group of trusted partners, with broader availability expected in the coming weeks.

OpenAI confirmed that the preview phase includes coordination with government stakeholders and select enterprises to evaluate real-world risks and performance. Pricing is structured per million tokens, with Sol positioned at the premium tier, followed by Terra and Luna for cost-sensitive deployments.

Feature Overview

FeatureGPT-5.6 Sol Details
Model TierFlagship (Highest capability)
Cybersecurity CapabilityAdvanced vulnerability discovery, exploit primitive identification
ExploitBench PerformanceCompetitive with top models using ~1/3 tokens
ExploitGym PerformanceImproved exploit path identification with higher reasoning
Terminal-Bench Score91.9% (state-of-the-art)
SafeguardsLayered stack (model restrictions, real-time monitoring, account analysis)
Red Teaming700,000+ GPU hours automated + human expert testing
Reasoning ModesMax reasoning, Ultra multi-agent mode
Exploit AutonomyDoes not produce full exploit chains (below critical threshold)
AvailabilityLimited preview (API, Codex), broader rollout expected
Pricing (per 1M tokens)$5 input / $30 output

The release reflects a broader industry trend toward balancing offensive security research capabilities with robust AI governance, as organizations increasingly integrate advanced models into vulnerability management and threat intelligence workflows.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Storm-2603 Hackers Exploit SharePoint and Abuse Cloudflare Tunnel to Hide Remote Access

A December intrusion to Storm-2603, the China-based group Microsoft ties to Warlock ransomware. The attackers…

2 minutes ago

OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords

A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that…

5 minutes ago

New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions

Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can…

15 minutes ago

Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction

Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious…

38 minutes ago

ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is…

1 hour ago

Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse

Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen…

1 hour ago