AI 主导攻击激增之际，OpenAI 推出全新网络安全模型

似乎每天都会有新的消息传出，某个 AI Agent 开始“失控”。无论是入侵 Hugging Face、黑入一个健身房网站，还是创建虚假个人资料以通过社会工程手段实施入侵，AI 模型的行为正越来越像恶意攻击者。

因此，开发这些会实施黑客攻击模型的 AI 实验室，也在扩大其网络防护产品。本周，OpenAI 宣布扩展其网络防御服务 Daybreak。该服务于今年早些时候推出，时间上距离 Anthropic 发布专注网络安全的模型 Mythos 不久。

Daybreak 是一项为防御方整合模型、工具和工作流访问权限的服务。本次扩展还包括一款专为防御工作设计的全新网络安全模型。

OpenAI 周一表示，Daybreak 此后将由 Blue 和 Red 两个层级组成。两个层级都将允许获批客户访问 OpenAI 的受限前沿网络安全模型。前沿模型——即目前可用的最先进模型——一直存在争议。特朗普政府此前曾寻求与 AI 公司合作，共同推进此类模型的部署，表面理由是安全担忧。此前，OpenAI 为使用这些模型设置了严格护栏，限制客户能够利用它们执行的操作。

Blue 看起来是两个层级中更基础的一档，提供多种网络安全服务，包括事件响应、恶意软件分析和补丁验证。OpenAI 将 Blue 称为“多数防御者的推荐起点”，暗示它应当足以满足大多数企业的需求。

另一方面，Red 提供更广泛、也可能更具危险性的工具集。该公司向其用户提供“经过专门训练的网络安全模型”，用于执行安全测试和漏洞研究。

Red 还包含新模型 GPT‑5.6‑Cyber，该模型仅在这一层级提供。该公司称，5.6‑Cyber 基于 GPT‑5.6 Sol 构建，并针对某些专业网络安全任务提供了增强能力。

目前，GPT‑5.6‑Cyber 仅面向“可信客户合作伙伴”开放，其中据报道包括 Accenture、IBM、Crowdstrike、Cloudflare 等公司。

尽管 AI Agent 带来的威胁正迅速增加，批评者也指出，这些威胁同样成为 AI 实验室的营销机会。OpenAI 显然正以这种方式营销其升级后的 Daybreak。

“网络安全领域正在迅速变化——威胁行为者将越来越多地利用 AI，以前所未有的速度和规模发动网络攻击，其中包括完全自主的攻击方式，”该公司在一篇博客文章中表示。“随着这些能力扩散，防御者的准备窗口正在缩小。”

与此同时，企业仍有兴趣从最了解这些安全风险的 AI 实验室购买防护服务，因为这些实验室对风险拥有第一手认知。

Every day seems to brings fresh news of an AI agent going “rogue.” Whether that’s compromising Hugging Face, hacking a gym website, or creating its own fake profiles to socially engineer an intrusion, AI models are increasingly behaving like bad actors.

So, the AI labs that make the models doing the hacking are expanding their cyber protection offerings. This week, OpenAI announced an expansion of Daybreak, its cyber defense service which it launched earlier this year, not long after Anthropic released its cyber-focused model Mythos.

Daybreak is a service that bundles access to models, tools and workflows for defenders. The expansion includes access to a brand new cyber-focused model designed for defensive work.

OpenAI said Monday that Daybreak would now consist of two tiers: Blue and Red. Both of these tiers will allow approved customers access to OpenAI’s limited-access frontier cyber models. Frontier models — the most advanced available — have been a subject of controversy. The Trump administration previously sought to collaborate with AI companies on the roll out of such models, purportedly over safety concerns. Previously, OpenAI deployed significant guardrails to using these models, limiting what customers could do with them.

Blue, which appears to be the more basic of the two, offers a variety of cyber services, including incident response, malware analysis, and patch validation. OpenAI calls Blue its “recommended starting point for most defenders,” implying that it should be more than enough for most enterprises.

Red, on the other hand, offers a broader and potentially more dangerous toolkit. The company grants its users “purpose-trained cybersecurity models,” designed to carry out security testing and vulnerability research.

With Red also comes the new model, GPT‑5.6‑Cyber, which is only available at that tier. 5.6-Cyber is built off of GPT‑5.6 Sol, and offers enhanced capabilities for certain specialized cybersecurity tasks, the company said.

At the moment, GPT‑5.6‑Cyber is only being made available for “trusted customer partners,” including reportedly Accenture, IBM, Crowdstrike, Cloudflare, and others.

While the threats from AI agents are rapidly increasing, critics have also pointed out that they function as marketing opportunities for the AI labs. OpenAI is certainly marketing its upgraded Daybreak that way.

“The cybersecurity world is rapidly changing—threat actors will increasingly use AI to conduct cyberattacks at unprecedented speed and scale, including in fully autonomous ways,” the company said in a blog post. “As these capabilities spread, defenders have a narrowing window to prepare.”

At the same time, enterprises remain interested in buying their protection from the AI labs who know the security risks best, because they know them first-hand.