OpenAI announced a partnership with Hacktron to test high-priority parts of OpenAI's systems, especially third-party-service connections, and expanded the research team's access to frontier cyber models through Daybreak Red.
Why it matters: Third-party connections are a distinct attack surface for increasingly agentic products. The partnership adds external offensive-security capacity, but it is a testing commitment rather than evidence that vulnerabilities have been found or fixed.
OpenAI released GPT-6 Cyber through the API and Codex to a select group of approved Daybreak Red customers. OpenAI reports 48.5% on ExploitGym versus 32.1% for GPT-5.6 Cyber, 40.3% recall in its web-pentesting evaluation, and materially stronger scope adherence.
Why it matters: The release raises the capability ceiling for vulnerability discovery and exploit validation while making access controls, authorization and human review part of the product boundary rather than optional deployment advice.
Google released Mantis, an Apache-2.0 agent harness for vulnerability discovery, triage, sandboxed reproduction and patching. Its modular skills work with supported coding agents, while a hierarchical security-summary tree is designed to preserve findings across long investigations.
Why it matters: Teams can inspect and adapt a complete agent-assisted security workflow instead of treating vulnerability findings as a one-shot model response. Its sandbox, evidence and human-approval boundaries are directly testable.
Microsoft now positions Project Perception as a control plane for 'agentic insiders': it discovers agents across identity, data, cloud, endpoint, network and runtime signals; assigns identity, permissions and containment; computes dynamic risk; and uses guardian agents to supervise actions with practitioner traceability.
Why it matters: The update moves agent security from model filtering toward identity, effective permissions, runtime signals and pre-action containment across the full execution path.